Red Hat Security AdvisoryRHSA-2015:0246
openstack-glance security update
Released 2015-02-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-glance-2013.2.4-3.el6ost, openstack-glance-doc-2013.2.4-3.el6ost, python-glance-2013.2.4-3.el6ost
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-glance-2014.1.3-4.el6ost, openstack-glance-doc-2014.1.3-4.el6ost, python-glance-2014.1.3-4.el6ost
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-glance-2014.1.3-4.el7ost, openstack-glance-doc-2014.1.3-4.el7ost, python-glance-2014.1.3-4.el7ost
Fixes 1 record
Priority LOW 30
The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image locati…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.02793 · Published 2015-01-07 · Partial fix CWE-264
