CVE-2015-5163
CVE-2015-5163
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.
CVSS 6.5 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
glance Debian:12
- Affected ranges
- ECOSYSTEM: < 2015.1.0-4
Update to 2015.1.0-4
glance Debian:13
- Affected ranges
- ECOSYSTEM: < 2015.1.0-4
Update to 2015.1.0-4
glance Debian:14
- Affected ranges
- ECOSYSTEM: < 2015.1.0-4
Update to 2015.1.0-4
glance PyPI
- Affected ranges
- ECOSYSTEM: ≥ 2015.1.0, < 2015.1.2
Update to 2015.1.2