CVE-2015-1856

Description

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Risk Information

Base Score

8.6

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:F/RL:O/RC:C

EPSS Score

Exploitation Probability

1.033

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2015-1856 are fixed in Python-swift 2.3.0	Windows
OpenStack distributed virtual object store (USN-2704-1) swift_2.2.2-0ubuntu1.3_all.deb	Linux
OpenStack distributed virtual object store (USN-2704-1) swift_1.13.1-0ubuntu1.2_all.deb	Linux
(RHSA-2015:1845) Moderate: Red Hat Gluster Storage 3.1 update python-gluster-3.7.1-16.el6.x86_64.rpm	Linux
(RHSA-2015:1846) Moderate: Red Hat Gluster Storage 3.1 update python-gluster-3.7.1-16.el7.x86_64.rpm	Linux
Vulnerabilities CVE-2015-1856 are fixed in Python-swift for linux 2.3.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234