CVE-2015-5163
openstack glance: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days. Fixed in glance 2015.1.2.
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:glance
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-q73f-vjc2-3gqf | PyPI | glance | >=2015.1.0 <2015.1.2 | 2015.1.2 |
| PYSEC-2015-39 | PyPI | glance | >=2015.1.0 <2015.1.2 | 2015.1.2 |