| Package | Affected versions | Patched versions |
|---|---|---|
| cinder | < 7.0.0a0 | 7.0.0a0 |
| icehouse | ≤ 2014.1.4 | |
| juno | = 2014.2= 2014.2.2= 2014.2.3 | |
| kilo | = 2015.1.0 |
OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free