Vulnerability CVE-2014-9493

Vulnerability Name:

CVE-2014-9493 (CCN-99345)

Assigned:

2014-12-10

Published:

2014-12-10

Updated:

2019-02-01

Summary:

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.

CVSS v3 Severity:

3.5 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:P)
4.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): Partial

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-264

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2014-9493

Source: CCN
Type: OpenStack Web Site
Glance

Source: MLIST
Type: Patch, Vendor Advisory
[openstack-announce] 20141223 [OSSA-2014-041] Glance v2 API unrestricted path traversal

Source: REDHAT
Type: Third Party Advisory
RHSA-2015:0246

Source: CCN
Type: IBM Security Bulletin T1022375
IBM Cloud Manager with OpenStack Glance Vulnerability (CVE-2014-9493)

Source: CCN
Type: IBM Security Bulletin N1020785
IBM PowerVC is impacted by OpenStack Glance v2 API unrestricted path traversal (CVE-2014-9493, CVE-2015-1195)

Source: CONFIRM
Type: Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Source: BID
Type: Third Party Advisory, VDB Entry
71688

Source: CCN
Type: BID-71688
OpenStack Glance 'glance-api server' Security Bypass Vulnerability

Source: CCN
Type: OSSA-2014-041
Glance allows users to download and delete any file in glance-api server

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://bugs.launchpad.net/glance/+bug/1400966

Source: XF
Type: UNKNOWN
openstack-glance-glanceapi-sec-bypass(99345)

Source: CONFIRM
Type: Vendor Advisory
https://security.openstack.org/ossa/OSSA-2014-041.html

Vulnerable Configuration:

Configuration 1:

cpe:/a:redhat:openstack:4.0:*:*:*:*:*:*:*

OR cpe:/a:redhat:openstack:5.0:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:openstack:image_registry_and_delivery_service_(glance):*:*:*:*:*:*:*:* (Version >= 2014.1 and < 2014.1.4)

OR cpe:/a:openstack:image_registry_and_delivery_service_(glance):*:*:*:*:*:*:*:* (Version >= 2014.2 and < 2014.2.2)

Configuration CCN 1:

cpe:/a:openstack:image_registry_and_delivery_service_(glance):2014.2.1:*:*:*:*:*:*:*

OR cpe:/a:openstack:image_registry_and_delivery_service_(glance):2014.1.3:*:*:*:*:*:*:*

AND

cpe:/a:ibm:powervc:1.2.0.0:*:*:*:standard:*:*:*

OR cpe:/a:ibm:powervc:1.2.1.0:-:-:-:standard:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.ubuntu.precise:def:20149493000	V	CVE-2014-9493 on Ubuntu 12.04 LTS (precise) - medium.	2015-01-07
oval:com.ubuntu.trusty:def:20149493000	V	CVE-2014-9493 on Ubuntu 14.04 LTS (trusty) - medium.	2015-01-07

BACK