OpenStack Cinder 23.0.0

CPE Details

OpenStack Cinder 23.0.0
openstack
cinder
23.0.0
2024-07-09
15h05 +00:00
2024-07-09
15h05 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:openstack:cinder:23.0.0:*:*:*:*:*:*:*

Informations

Vendor

openstack

Product

cinder

Version

23.0.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-32498 2024-07-04 22h00 +00:00 An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.
6.5
Medium
CVE-2014-3641 2014-10-08 17h00 +00:00 The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.
4