CVE-2017-7200CWE-918ssrf

CVE-2017-7200

Medium · published March 21, 2017

CVSS v3.1
5.8
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02057 · 81.0th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2017-03-21T10:59Z
Affected products (1)
ProductVersionsFixed in
openstack/glance< 11.0.011.0.0
References (8)
http://www.securityfocus.com/bid/96988 · [email protected]https://bugs.launchpad.net/ossn/+bug/1153614 · [email protected]https://bugs.launchpad.net/ossn/+bug/1606495 · [email protected]https://wiki.openstack.org/wiki/OSSN/OSSN-0078 · [email protected]http://www.securityfocus.com/bid/96988 · af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/ossn/+bug/1153614 · af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/ossn/+bug/1606495 · af854a3a-2127-422b-91ae-364da2661108https://wiki.openstack.org/wiki/OSSN/OSSN-0078 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 MAR 06:21Z
    An SSRF issue was discovered in OpenStack Glance before Newton
    cvelistv5