CVE-2015-5251
CVE-2015-5251
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.
EPSS 2.1% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
glance Debian:12
- Affected ranges
- ECOSYSTEM: < 1:11.0.0-1
Update to 1:11.0.0-1
glance Debian:13
- Affected ranges
- ECOSYSTEM: < 1:11.0.0-1
Update to 1:11.0.0-1
glance Debian:14
- Affected ranges
- ECOSYSTEM: < 1:11.0.0-1
Update to 1:11.0.0-1
glance PyPI
- Affected ranges
- ECOSYSTEM: ≥ 2011.2, < 2014.2.4
Update to 2014.2.4
glance PyPI
- Affected ranges
- ECOSYSTEM: ≥ 2015.1.0, < 2015.1.2
Update to 2015.1.2
glance PyPI
- Affected ranges
- ECOSYSTEM: ≥ 2011.2, < 2014.2.4 ∪ ≥ 2015.1.0, < 2015.1.2
Update to 2014.2.4; Update to 2015.1.2
glance Ubuntu:14.04:LTS
- Versions
- 1:2013.2~rc2-0ubuntu1
- 1:2013.2-0ubuntu1
- 1:2014.1~b1-0ubuntu1
- 1:2014.1~b2-0ubuntu1
- 1:2014.1~b3-0ubuntu2
- 1:2014.1~rc1-0ubuntu1
- 1:2014.1~rc2-0ubuntu1
- 1:2014.1-0ubuntu1
- 1:2014.1.1-0ubuntu2
- 1:2014.1.2-0ubuntu1
- 1:2014.1.2-0ubuntu1.1
- 1:2014.1.3-0ubuntu1
- 1:2014.1.4-0ubuntu2
- 1:2014.1.5-0ubuntu1
- Affected ranges
- ECOSYSTEM: < 1:2014.1.5-0ubuntu1.1
Update to 1:2014.1.5-0ubuntu1.1