CVE-2015-7548

LOW

OpenStack Compute <2015.1.3 - Info Disclosure

Title source: llm

Description

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

References (3)

Scores

CVSS v3 3.5
EPSS 0.0017
EPSS Percentile 38.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Classification

CWE
CWE-200
Status draft

Affected Products (1)

openstack/nova < 12.0.1

Timeline

Published Jan 12, 2016
Tracked Since Feb 18, 2026