CVE-2015-5251

Currently unrated 🤨

Key Information

Vendor
Openstack
Status
Image Registry And Delivery Service \(glance\)
Vendor
CVE Published:
26 October 2015

Summary

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.

References

https://security.openstack.org/ossa/OSSA-2015-019.html
x_refsource_CONFIRM
https://bugs.launchpad.net/bugs/1482371
x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1897.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.