CVE-2015-5223
openstack swift: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days. Fixed in swift 2.4.0.
OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:swift
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-q45h-chc8-hvp6 | PyPI | swift | <2.4.0 | 2.4.0 |
| PYSEC-2026-934 | PyPI | swift | <2.4.0 | 2.4.0 |
References
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1895.html
- http://rhn.redhat.com/errata/RHSA-2016-0329.html
- http://www.openwall.com/lists/oss-security/2015/08/26/5
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html