CVE-2015-5251

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their…

published October 26, 2015

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02052 · 81.0th percentile
Published
2015-10-26T17:00Z
EPSS history
Timeline
  • 26 OCT 17:00Z
    OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their…
    cvelistv5