CVE-2015-5251

Published: Oct 26, 2015Modified: May 6, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.

Affected (3)

Products: Openstack: Image Registry And Delivery Service (glance)

Openstack

1 product

Image Registry And Delivery Service (glance)

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Openstack Image Registry And Delivery Service (glance)	Up to 2014.2.3
Openstack Image Registry And Delivery Service (glance)	Version 2015.1.0
Openstack Image Registry And Delivery Service (glance)	Version 2015.1.1