Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-ea21-seng-n3fw

Summary

OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header.

Aliases

alias	CVE-2014-3641

alias	GHSA-qhch-g8qr-p497

Fixed_packages

url	pkg:deb/debian/cinder@2014.1.3-1?distro=trixie
purl	pkg:deb/debian/cinder@2014.1.3-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2014.1.3-1%3Fdistro=trixie

url	pkg:deb/debian/cinder@2:17.0.1-1%2Bdeb11u1?distro=trixie
purl	pkg:deb/debian/cinder@2:17.0.1-1%2Bdeb11u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:17.0.1-1%252Bdeb11u1%3Fdistro=trixie

url	pkg:deb/debian/cinder@2:21.3.1-1~deb12u1?distro=trixie
purl	pkg:deb/debian/cinder@2:21.3.1-1~deb12u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:21.3.1-1~deb12u1%3Fdistro=trixie

url	pkg:deb/debian/cinder@2:26.0.0-2?distro=trixie
purl	pkg:deb/debian/cinder@2:26.0.0-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:26.0.0-2%3Fdistro=trixie

url	pkg:deb/debian/cinder@2:28.0.0~rc2-1?distro=trixie
purl	pkg:deb/debian/cinder@2:28.0.0~rc2-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:28.0.0~rc2-1%3Fdistro=trixie

url	pkg:deb/debian/cinder@2:28.0.0-1?distro=trixie
purl	pkg:deb/debian/cinder@2:28.0.0-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:28.0.0-1%3Fdistro=trixie

Affected_packages

url pkg:pypi/cinder@10.0.8

purl pkg:pypi/cinder@10.0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@10.0.8

url pkg:pypi/cinder@11.2.0

purl pkg:pypi/cinder@11.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@11.2.0

url pkg:pypi/cinder@11.2.1

purl pkg:pypi/cinder@11.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@11.2.1

url pkg:pypi/cinder@11.2.2

purl pkg:pypi/cinder@11.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@11.2.2

url pkg:pypi/cinder@12.0.4

purl pkg:pypi/cinder@12.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@12.0.4

url pkg:pypi/cinder@12.0.5

purl pkg:pypi/cinder@12.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@12.0.5

url pkg:pypi/cinder@12.0.6

purl pkg:pypi/cinder@12.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@12.0.6

url pkg:pypi/cinder@12.0.7

purl pkg:pypi/cinder@12.0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@12.0.7

url pkg:pypi/cinder@12.0.8

purl pkg:pypi/cinder@12.0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@12.0.8

url pkg:pypi/cinder@12.0.9

purl pkg:pypi/cinder@12.0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@12.0.9

url pkg:pypi/cinder@12.0.10

purl pkg:pypi/cinder@12.0.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@12.0.10

url pkg:pypi/cinder@13.0.1

purl pkg:pypi/cinder@13.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.1

url pkg:pypi/cinder@13.0.2

purl pkg:pypi/cinder@13.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.2

url pkg:pypi/cinder@13.0.3

purl pkg:pypi/cinder@13.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.3

url pkg:pypi/cinder@13.0.4

purl pkg:pypi/cinder@13.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.4

url pkg:pypi/cinder@13.0.5

purl pkg:pypi/cinder@13.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.5

url pkg:pypi/cinder@13.0.6

purl pkg:pypi/cinder@13.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.6

url pkg:pypi/cinder@13.0.7

purl pkg:pypi/cinder@13.0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.7

url pkg:pypi/cinder@13.0.8

purl pkg:pypi/cinder@13.0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.8

url pkg:pypi/cinder@13.0.9

purl pkg:pypi/cinder@13.0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@13.0.9

url pkg:pypi/cinder@14.0.0.0rc1

purl pkg:pypi/cinder@14.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.0.0.0rc1

url pkg:pypi/cinder@14.0.0.0rc2

purl pkg:pypi/cinder@14.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.0.0.0rc2

url pkg:pypi/cinder@14.0.0

purl pkg:pypi/cinder@14.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.0.0

url pkg:pypi/cinder@14.0.1

purl pkg:pypi/cinder@14.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.0.1

url pkg:pypi/cinder@14.0.2

purl pkg:pypi/cinder@14.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.0.2

url pkg:pypi/cinder@14.0.3

purl pkg:pypi/cinder@14.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.0.3

url pkg:pypi/cinder@14.0.4

purl pkg:pypi/cinder@14.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.0.4

url pkg:pypi/cinder@14.1.0

purl pkg:pypi/cinder@14.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.1.0

url pkg:pypi/cinder@14.2.0

purl pkg:pypi/cinder@14.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.2.0

url pkg:pypi/cinder@14.2.1

purl pkg:pypi/cinder@14.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.2.1

url pkg:pypi/cinder@14.3.0

purl pkg:pypi/cinder@14.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.3.0

url pkg:pypi/cinder@14.3.1

purl pkg:pypi/cinder@14.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@14.3.1

url pkg:pypi/cinder@15.0.0.0rc1

purl pkg:pypi/cinder@15.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.0.0.0rc1

url pkg:pypi/cinder@15.0.0.0rc2

purl pkg:pypi/cinder@15.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.0.0.0rc2

url pkg:pypi/cinder@15.0.0

purl pkg:pypi/cinder@15.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.0.0

url pkg:pypi/cinder@15.0.1

purl pkg:pypi/cinder@15.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.0.1

url pkg:pypi/cinder@15.1.0

purl pkg:pypi/cinder@15.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.1.0

url pkg:pypi/cinder@15.2.0

purl pkg:pypi/cinder@15.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.2.0

url pkg:pypi/cinder@15.3.0

purl pkg:pypi/cinder@15.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.3.0

url pkg:pypi/cinder@15.4.0

purl pkg:pypi/cinder@15.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.4.0

url pkg:pypi/cinder@15.4.1

purl pkg:pypi/cinder@15.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.4.1

url pkg:pypi/cinder@15.5.0

purl pkg:pypi/cinder@15.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.5.0

url pkg:pypi/cinder@15.6.0

purl pkg:pypi/cinder@15.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@15.6.0

url pkg:pypi/cinder@16.0.0.0b1

purl pkg:pypi/cinder@16.0.0.0b1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.0.0.0b1

url pkg:pypi/cinder@16.0.0.0rc1

purl pkg:pypi/cinder@16.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.0.0.0rc1

url pkg:pypi/cinder@16.0.0.0rc2

purl pkg:pypi/cinder@16.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.0.0.0rc2

url pkg:pypi/cinder@16.0.0.0rc3

purl pkg:pypi/cinder@16.0.0.0rc3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.0.0.0rc3

url pkg:pypi/cinder@16.0.0

purl pkg:pypi/cinder@16.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uus-f9pq-qkb5

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.0.0

url pkg:pypi/cinder@16.1.0

purl pkg:pypi/cinder@16.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.1.0

url pkg:pypi/cinder@16.2.0

purl pkg:pypi/cinder@16.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.2.0

url pkg:pypi/cinder@16.2.1

purl pkg:pypi/cinder@16.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.2.1

url pkg:pypi/cinder@16.3.0

purl pkg:pypi/cinder@16.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.3.0

url pkg:pypi/cinder@16.4.0

purl pkg:pypi/cinder@16.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.4.0

url pkg:pypi/cinder@16.4.1

purl pkg:pypi/cinder@16.4.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.4.1

url pkg:pypi/cinder@16.4.2

purl pkg:pypi/cinder@16.4.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@16.4.2

url pkg:pypi/cinder@17.0.0.0rc1

purl pkg:pypi/cinder@17.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.0.0.0rc1

url pkg:pypi/cinder@17.0.0.0rc2

purl pkg:pypi/cinder@17.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.0.0.0rc2

url pkg:pypi/cinder@17.0.0

purl pkg:pypi/cinder@17.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.0.0

url pkg:pypi/cinder@17.0.1

purl pkg:pypi/cinder@17.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.0.1

url pkg:pypi/cinder@17.1.0

purl pkg:pypi/cinder@17.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.1.0

url pkg:pypi/cinder@17.2.0

purl pkg:pypi/cinder@17.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.2.0

url pkg:pypi/cinder@17.3.0

purl pkg:pypi/cinder@17.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.3.0

url pkg:pypi/cinder@17.4.0

purl pkg:pypi/cinder@17.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@17.4.0

url pkg:pypi/cinder@18.0.0.0b1

purl pkg:pypi/cinder@18.0.0.0b1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@18.0.0.0b1

url pkg:pypi/cinder@18.0.0.0rc1

purl pkg:pypi/cinder@18.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@18.0.0.0rc1

url pkg:pypi/cinder@18.0.0.0rc2

purl pkg:pypi/cinder@18.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@18.0.0.0rc2

url pkg:pypi/cinder@18.0.0

purl pkg:pypi/cinder@18.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@18.0.0

url pkg:pypi/cinder@18.1.0

purl pkg:pypi/cinder@18.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@18.1.0

url pkg:pypi/cinder@18.2.0

purl pkg:pypi/cinder@18.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@18.2.0

url pkg:pypi/cinder@19.0.0.0b1

purl pkg:pypi/cinder@19.0.0.0b1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@19.0.0.0b1

url pkg:pypi/cinder@19.0.0.0rc1

purl pkg:pypi/cinder@19.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@19.0.0.0rc1

url pkg:pypi/cinder@19.0.0.0rc2

purl pkg:pypi/cinder@19.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@19.0.0.0rc2

url pkg:pypi/cinder@19.0.0

purl pkg:pypi/cinder@19.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@19.0.0

url pkg:pypi/cinder@19.1.0

purl pkg:pypi/cinder@19.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@19.1.0

url pkg:pypi/cinder@20.0.0.0rc1

purl pkg:pypi/cinder@20.0.0.0rc1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@20.0.0.0rc1

url pkg:pypi/cinder@20.0.0.0rc2

purl pkg:pypi/cinder@20.0.0.0rc2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@20.0.0.0rc2

url pkg:pypi/cinder@20.0.0

purl pkg:pypi/cinder@20.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-br4q-499g-vqhg

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-h6rd-5p7q-s3gq

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cinder@20.0.0

url pkg:rpm/redhat/openstack-cinder@2014.1.3-1?arch=el7ost

purl pkg:rpm/redhat/openstack-cinder@2014.1.3-1?arch=el7ost

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8p6b-qw5m-jfha

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-ykzj-fz7y-eug8

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-cinder@2014.1.3-1%3Farch=el7ost

url pkg:rpm/redhat/openstack-cinder@2014.1.3-1?arch=el6ost

purl pkg:rpm/redhat/openstack-cinder@2014.1.3-1?arch=el6ost

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8p6b-qw5m-jfha

vulnerability	VCID-ea21-seng-n3fw

vulnerability	VCID-ykzj-fz7y-eug8

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-cinder@2014.1.3-1%3Farch=el6ost

References

reference_url

http://rhn.redhat.com/errata/RHSA-2014-1787.html

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

http://rhn.redhat.com/errata/RHSA-2014-1787.html

reference_url

http://rhn.redhat.com/errata/RHSA-2014-1788.html

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

http://rhn.redhat.com/errata/RHSA-2014-1788.html

reference_url

https://access.redhat.com/errata/RHSA-2014:1787

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHSA-2014:1787

reference_url

https://access.redhat.com/errata/RHSA-2014:1788

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHSA-2014:1788

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3641.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3641.json

reference_url

https://access.redhat.com/security/cve/CVE-2014-3641

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/security/cve/CVE-2014-3641

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2014-3641

reference_id

reference_type

scores

value	0.00329
scoring_system	epss
scoring_elements	0.55898
published_at	2026-04-16T12:55:00Z

value	0.00329
scoring_system	epss
scoring_elements	0.55902
published_at	2026-04-18T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.55899
published_at	2026-04-01T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.56011
published_at	2026-04-02T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.56032
published_at	2026-04-04T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.5601
published_at	2026-04-07T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.56061
published_at	2026-04-08T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.56065
published_at	2026-04-09T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.56076
published_at	2026-04-11T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.56056
published_at	2026-04-12T12:55:00Z

value	0.00331
scoring_system	epss
scoring_elements	0.56039
published_at	2026-04-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2014-3641

reference_url

https://bugs.launchpad.net/cinder/+bug/1350504

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://bugs.launchpad.net/cinder/+bug/1350504

reference_url

https://bugzilla.redhat.com/show_bug.cgi?id=1141996

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://bugzilla.redhat.com/show_bug.cgi?id=1141996

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3641
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3641

reference_url

http://seclists.org/oss-sec/2014/q4/78

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

http://seclists.org/oss-sec/2014/q4/78

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2014-3641

reference_id

reference_type

scores

value	4.0
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:S/C:P/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2014-3641

reference_url

https://opendev.org/openstack/cinder

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://opendev.org/openstack/cinder

reference_url

https://web.archive.org/web/20200228053848/http://www.securityfocus.com/bid/70221

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://web.archive.org/web/20200228053848/http://www.securityfocus.com/bid/70221

reference_url	http://www.securityfocus.com/bid/70221
reference_id
reference_type
scores
url	http://www.securityfocus.com/bid/70221

reference_url

http://www.ubuntu.com/usn/USN-2405-1

reference_id

reference_type

scores

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

http://www.ubuntu.com/usn/USN-2405-1

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openstack:cinder::::::::
reference_id	cpe:2.3:a:openstack:cinder::::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openstack:cinder::::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openstack:cinder:2014.1.1:::::::*
reference_id	cpe:2.3:a:openstack:cinder:2014.1.1:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openstack:cinder:2014.1.1:::::::*

reference_url

https://github.com/advisories/GHSA-qhch-g8qr-p497

reference_id

GHSA-qhch-g8qr-p497

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-qhch-g8qr-p497

reference_url	https://usn.ubuntu.com/2405-1/
reference_id	USN-2405-1
reference_type
scores
url	https://usn.ubuntu.com/2405-1/

Weaknesses

cwe_id	200
name	Exposure of Sensitive Information to an Unauthorized Actor
description	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

cwe_id	22
name	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score 4.0 - 6.9

Exploitability 0.5

Weighted_severity 6.2

Risk_score 3.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ea21-seng-n3fw

Vulnerability Instance