OpenStack Cinder Information Leakage Vulnerability (CVE-2015-1851)

OpenStack Cinder Information Leakage Vulnerability (CVE-2015-1851)
OpenStack Cinder Information Leakage Vulnerability (CVE-2015-1851)

Release date:
Updated on:

Affected Systems:

Openstack Cinder

Description:

CVE (CAN) ID: CVE-2015-1851

Cinder is a block storage service of OpenStack.

OpenStack Cinder has a security vulnerability. authenticated remote users can exploit this vulnerability to read arbitrary files by using the constructed graphic qcow2 signature in the upload-to-image command.

<* Source: Bastian Blank
*>

Suggestion:

Vendor patch:

Openstack
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://bugs.launchpad.net/cinder/+bug/1415087

This article permanently updates the link address: