The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-01-21T18:00:00

Updated: 2024-08-06T04:33:20.821Z

Reserved: 2015-01-18T00:00:00

Link: CVE-2015-1195

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-01-21T18:59:56.090

Modified: 2024-11-21T02:24:51.413

Link: CVE-2015-1195

cve-icon Redhat

Severity : Important

Publid Date: 2015-01-12T00:00:00Z

Links: CVE-2015-1195 - Bugzilla