Red Hat Security Advisory

RHSA-2018:3601

openstack-cinder security and bug fix update

Released 2018-11-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 openstack-cinder-1:12.0.4-2.el7ost, python-cinder-1:12.0.4-2.el7ost

Fixes 1 record

TI-2017-11109 CVE-2017-15139 · GHSA-j9j4-4235-xf59

Information disclosure in openstack-cinder

LOW 35

A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01244 Published 2018-08-27 Partial fix CWE-200