CVE-2017-15139
CVE-2017-15139
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.1EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
27 Aug 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants.
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
OpenStack Foundation · openstack-cinderWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →