Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-9493

Опубликовано: 07 янв. 2015
Источник: nvd
CVSS2: 5.5
EPSS Низкий

Описание

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):*:*:*:*:*:*:*:*
Версия от 2014.1 (включая) до 2014.1.4 (исключая)
cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):*:*:*:*:*:*:*:*
Версия от 2014.2 (включая) до 2014.2.2 (исключая)

EPSS

Процентиль: 73%
0.00746
Низкий

5.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu логотип

CVE-2014-9493

ubuntu
около 11 лет назад

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.

redhat логотип

CVE-2014-9493

redhat
около 11 лет назад

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.

debian логотип

CVE-2014-9493

debian
около 11 лет назад

The V2 API in OpenStack Image Registry and Delivery Service (Glance) b ...

github логотип

GHSA-jgr4-76hh-5p7q

github
больше 3 лет назад

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.

EPSS

Процентиль: 73%
0.00746
Низкий

5.5 Medium

CVSS2

Дефекты

CWE-264