CVE-2017-15139mediumCWE-200

CVE-2017-15139: medium-severity vulnerability in openstack-cinder

Published · Updated

Follow this CVE+ Monitor openstack-cinder+ Monitor cinder

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 1.2%
A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants.
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
OpenStack Foundation · openstack-cinder