| Package | Affected versions | Patched versions |
|---|---|---|
| cinder | < 7.0.0a0 | 7.0.0a0 |
| cinder | = 2013.1.1= 2013.1.2 |
The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free