Disk Cleaning Flaw in OpenStack Ironic by OpenStack
CVE-2015-7514

6.5MEDIUM

Key Information:

Vendor

Openstack
Status
Ironic
Vendor
CVE Published:
7 June 2017

What is CVE-2015-7514?

The OpenStack Ironic component, versions 4.2.0 to 4.2.1, is susceptible to a vulnerability where it fails to properly clean disk images after they are used. This oversight permits remote authenticated users to potentially access sensitive information left on the disks. Effective disk cleaning measures are crucial to prevent unauthorized data retrieval and protect user privacy.

References

https://review.openstack.org/#/c/253001
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/12/03/4
mailing-listx_refsource_MLIST
https://review.openstack.org/#/c/252993
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.