CVE-2015-1851
openstack-cinder: Host file disclosure through qcow2 backing file
OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.
CVSS 2.0 · 6.8 Medium
EPSS 2.6%
KEV · Not listed
Vendors
Products