NVD

Id
26483  
Name
CVE-2015-5286  
Description
OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token that expires during the process. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9623.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-10-26  
Modified Date
2016-11-28  
Seq
2015-5286  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140033 26483 CVE-2015-5286 RHSA-2015:1897  View
140034 26483 CVE-2015-5286 76943  View
140035 26483 CVE-2015-5286 https://bugs.launchpad.net/bugs/1498163  View
140036 26483 CVE-2015-5286 https://security.openstack.org/ossa/OSSA-2015-020.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10316 JVNDB-2015-005636 OpenStack Image Service におけるストレージクォータを回避される脆弱性 OpenStack Image Service (Glance) には、ストレージクォータを回避され、サービス運用妨害 (ディスクの消費) 状態にされる脆弱性が存在します。 CVE-2015-5286 82511 CVE-2015-5286 26483 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005636.html 2015-10-01 2015-10-29 View