Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-1851
HistoryJun 25, 2015 - 4:59 p.m.

CVE-2015-1851

2015-06-2516:59:00
CWE-200
[email protected]
web.nvd.nist.gov
45
openstack
cinder
cve-2015-1851
security vulnerability
remote file read
qcow2
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.4%

JSON

OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch15.04
Node
openstackicehouseRange≤2014.1.4
OR
openstackjunoMatch2014.2
OR
openstackjunoMatch2014.2.2
OR
openstackjunoMatch2014.2.3
OR
openstackkiloMatch2015.1.0

Related

debiancve 1
openvas 4
securityvulns 2
debian 2
redhat 1
nessus 3
ubuntu 1
prion 1
cvelist 1
fedora 1
nvd 1
github 1
ubuntucve 1
debiancve
debiancve
CVE-2015-1851
2015-06-25 16:59:00
openvas
openvas
Ubuntu: Security Advisory (USN-2703-1)
2015-09-18 00:00:00
Fedora Update for openstack-cinder FEDORA-2015-10254
2015-07-18 00:00:00
Debian: Security Advisory (DSA-3292-1)
2015-06-18 00:00:00
securityvulns
securityvulns
OpenStack cinder privilege escalation
2015-06-21 00:00:00
[SECURITY] [DSA 3292-1] cinder security update
2015-06-21 00:00:00
debian
debian
[SECURITY] [DSA 3292-1] cinder security update
2015-06-19 11:52:12
[SECURITY] [DSA 3292-1] cinder security update
2015-06-19 11:52:12
redhat
redhat
(RHSA-2015:1206) Important: openstack-cinder security and bug fix update
2015-07-02 00:00:00
nessus
nessus
Ubuntu 15.04 : cinder vulnerability (USN-2703-1)
2015-08-06 00:00:00
Fedora 21 : openstack-cinder-2014.1.4-2.fc21 (2015-10254)
2015-07-20 00:00:00
Debian DSA-3292-1 : cinder - security update
2015-06-22 00:00:00
ubuntu
ubuntu
Cinder vulnerability
2015-08-06 00:00:00
prion
prion
Command injection
2015-06-25 16:59:00
cvelist
cvelist
CVE-2015-1851
2015-06-25 16:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: openstack-cinder-2014.1.4-2.fc21
2015-07-18 02:04:07
nvd
nvd
CVE-2015-1851
2015-06-25 16:59:00
github
github
OpenStack Cinder file disclosure in image convert
2022-05-17 03:15:10
ubuntucve
ubuntucve
CVE-2015-1851
2015-06-25 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.4%

JSON
Related for CVE-2015-1851
debiancve1openvas4securityvulns2debian2redhat1nessus3ubuntu1prion1cvelist1fedora1nvd1github1ubuntucve1