Security Advisory

CVE-2015-5251

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-10-26 17:00:00
Last updated 2024-08-06 06:41:08
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.