CVE-2015-5286

Loading...

General

Score:6.8/10.0
Severity:Medium
Category:Access Control Error

Impact Metrics

Confidentiality:None
Integrity:None
Availability:Complete

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:Single

Relative vulnerabilities

CVE-2015-5251, CVE-2016-0757

Published on 26/10/15 - Updated on 28/11/16

Description

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token that expires during the process. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9623.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2015-5286
Ubuntu USN-3446-1

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
openstackimage_registry_and_delivery_service_(glance)

Share this vulnerability with:

Twitter Facebook LinkedIn Mail