Red Hat Security AdvisoryRHSA-2015:1684
openstack-swift security update
Released 2015-08-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-swift-1.13.1-6.el6ost, openstack-swift-account-1.13.1-6.el6ost, openstack-swift-container-1.13.1-6.el6ost +3
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-swift-1.13.1-5.el7ost, openstack-swift-account-1.13.1-5.el7ost, openstack-swift-container-1.13.1-5.el7ost +3
Fixes 1 record
Priority LOW 32
OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location contain…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.04063 · Published 2015-04-17 · Partial fix · 2.3.0 CWE-264