CVE-2015-1195

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or…

published January 21, 2015

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02792 · 86.3th percentile
Published
2015-01-21T18:00Z
EPSS history
Timeline
  • 21 JAN 18:00Z
    The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or…
    cvelistv5