NVD

Id
28093  
Name
CVE-2015-7548  
Description
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-01-12  
Modified Date
2016-12-05  
Seq
2015-7548  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147595 28093 CVE-2015-7548 RHSA-2016:0018  View
147596 28093 CVE-2015-7548 80176  View
147597 28093 CVE-2015-7548 https://security.openstack.org/ossa/OSSA-2016-001.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11478 JVNDB-2015-006798 OpenStack Compute における任意のファイルを読まれる脆弱性 OpenStack Compute (Nova) には、spawn インスタンスに libvirt を使用し、かつ use_cow_images が false に設定されている場合、任意のファイルを読まれる脆弱性が存在します。 CVE-2015-7548 84773 CVE-2015-7548 28093 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006798.html 2015-09-29 2016-01-21 View