Описание
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.2.2-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.13.1-0ubuntu1.2]] |
| lucid | DNE | |
| precise | released | 1.4.8-0ubuntu2.5 |
| trusty | released | 1.13.1-0ubuntu1.2 |
| trusty/esm | DNE | trusty was released [1.13.1-0ubuntu1.2] |
| upstream | needed | |
| utopic | released | 2.2.0-0ubuntu1 |
| vivid | released | 2.2.2-0ubuntu1 |
Показывать по
EPSS
4 Medium
CVSS2
Связанные уязвимости
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
OpenStack Object Storage (Swift) before 2.2.0 allows remote authentica ...
OpenStack Swift metadata constraints are not correctly enforced
EPSS
4 Medium
CVSS2