CVE

Id
76794  
CVE No.
CVE-2014-9493  
Status
Candidate  
Description
The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.  
Phase
Assigned (20150103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705327 76794 CVE-2014-9493 MLIST:[openstack-announce] 20141223 [OSSA-2014-041] Glance v2 API unrestricted path traversal  View
705328 76794 CVE-2014-9493 URL:http://lists.openstack.org/pipermail/openstack-announce/2014-December/000317.html  View
705329 76794 CVE-2014-9493 CONFIRM:https://bugs.launchpad.net/glance/+bug/1400966  View
705330 76794 CVE-2014-9493 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
705331 76794 CVE-2014-9493 CONFIRM:https://security.openstack.org/ossa/OSSA-2014-041.html  View
705332 76794 CVE-2014-9493 REDHAT:RHSA-2015:0246  View
705333 76794 CVE-2014-9493 URL:http://rhn.redhat.com/errata/RHSA-2015-0246.html  View
705334 76794 CVE-2014-9493 BID:71688  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18693 JVNDB-2014-007568 Drupal 用 Poll Chart Block モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Poll Chart Block モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-9501 76794 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007568.html  View