GitHub Advisoryadvisory · PyPI

GHSA-qhch-g8qr-p497 OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability

MEDIUM Published 2022-05-17 Modified 2023-02-08 Official page ↗
Aliases
CVE-2014-3641
Ecosystem
PyPI
Packages
cinder
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2023-02-08

Affected packages

• PyPI cinder: < 2014.1.3 → fixed in 2014.1.3

Description

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

Related

Alias · CVE (1)

  • CVE-2014-3641 The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References