CVE-2022-47951

CWE-22 — Path TraversalCWE-552 — Files Accessible to External PartiesCWE-436 — Interpretation Conflict15 documents7 sources
Severity
5.7MEDIUM
EPSS
0.7%
top 27.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Openstack CinderOpenstack GlanceOpenstack Nova+1 more
Timeline
PublishedJan 26
Latest updateNov 7

Description

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:NExploitability: 2.1 | Impact: 3.6

Affected Packages9 packages

▶NVDopenstack/nova25.0.0 — 25.0.2+1
▶NVDopenstack/cinder20.0.0 — 20.0.2+1
▶NVDopenstack/glance24.0.0 — 24.1.1+1
▶PyPInova25.0.0 — 25.0.2+1
▶PyPIcinder20.0.0 — 20.0.2+1

Also affects: Debian Linux 10.0, 11.0

Patches

Patch: launchpad.net ↗Patch: security.openstack.org ↗Patch: launchpad.net ↗

🔴Vulnerability Details

5
GHSA
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data↗2024-07-24
▶
OSV
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal↗2023-01-27
▶
GHSA
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal↗2023-01-27
▶
CVEList
CVE-2022-47951: An issue was discovered in OpenStack Cinder before 19↗2023-01-26
▶
OSV
CVE-2022-47951: An issue was discovered in OpenStack Cinder before 19↗2023-01-26
▶

📋Vendor Advisories

9
Ubuntu
Cinder regression↗2024-11-07
▶
Red Hat
openstack-nova: Regression VMDK/qcow arbitrary file access↗2024-07-23
▶
Ubuntu
Cinder vulnerability↗2023-02-09
▶
Ubuntu
Nova vulnerability↗2023-02-09
▶
Ubuntu
Cinder vulnerability↗2023-01-31
▶
CVE-2022-47951 (MEDIUM CVSS 5.7) | An issue was discovered in OpenStac | cvebase.io