CVE-2017-7200

MEDIUM

OpenStack Glance < Newton - Server-Side Request Forgery via Image Service API v1 copy_from Feature

Title source: llm
STIX 2.1

Description

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96988
Third Party Advisory x_refsource_confirm
https://bugs.launchpad.net/ossn/+bug/1153614
Vendor Advisory x_refsource_confirm
https://wiki.openstack.org/wiki/OSSN/OSSN-0078
Third Party Advisory x_refsource_confirm
https://bugs.launchpad.net/ossn/+bug/1606495

Scores

CVSS v3 5.8
EPSS 0.0038
EPSS Percentile 59.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Details

CWE
CWE-918
Status published
Products (2)
openstack/glance < mitaka
pypi/glance 0 - 11.0.0a0PyPI
Published Mar 21, 2017
Tracked Since Feb 18, 2026