Search for packages
| purl | pkg:rpm/redhat/openstack-glance@2015.1.0-6.el7ost?arch=1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-hbpu-kpak-2uer
Aliases: CVE-2015-5163 GHSA-q73f-vjc2-3gqf PYSEC-2015-39 |
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:40:08.617192+00:00 | RedHat Importer | Affected by | VCID-hbpu-kpak-2uer | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5163.json | 38.0.0 |