Red Hat Security Advisory

RHSA-2015:0835

openstack-swift security update

Released 2015-04-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-swift-1.13.1-4.el7ost, openstack-swift-account-1.13.1-4.el7ost, openstack-swift-container-1.13.1-4.el7ost +3

Fixes 1 record

TI-2014-06622 CVE-2014-7960 · GHSA-g6x3-55qv-x6p2

OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass…

LOW 24

OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03133 Published 2014-10-17 Partial fix · 2.2.0 CWE-399