Log in Start free

Vulnerability · Published Jan 26, 2023 · Assigned by mitre

CVE-2022-47951

Medium 5.7

In plain English

A medium-severity path traversal in the cinder package (Debian). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)1.1%top 35.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12cinder2:21.0.0-3DEBIAN-CVE-2022-47951
Debian:13cinder2:21.0.0-3DEBIAN-CVE-2022-47951
Debian:14cinder2:21.0.0-3DEBIAN-CVE-2022-47951
Debian:12glance2:25.0.0-2DEBIAN-CVE-2022-47951
Debian:13glance2:25.0.0-2DEBIAN-CVE-2022-47951
Debian:14glance2:25.0.0-2DEBIAN-CVE-2022-47951
Debian:12nova2:26.0.0-6DEBIAN-CVE-2022-47951
Debian:13nova2:26.0.0-6DEBIAN-CVE-2022-47951
Debian:14nova2:26.0.0-6DEBIAN-CVE-2022-47951
PyPIcinder19.1.2, 20.0.2PYSEC-2026-2411
PyPIcinder20.0.2GHSA-7h75-hwxx-qpgc
PyPIcinder19.1.2GHSA-7h75-hwxx-qpgc
PyPIglance23.0.1, 24.1.1PYSEC-2026-2490
PyPIglance24.1.1GHSA-7h75-hwxx-qpgc
PyPIglance23.0.1GHSA-7h75-hwxx-qpgc
PyPInova24.1.2, 25.0.2PYSEC-2026-868
PyPInova25.0.2GHSA-7h75-hwxx-qpgc
PyPInova24.1.2GHSA-7h75-hwxx-qpgc
Ubuntu:22.04:LTScinder2:20.1.0-0ubuntu1USN-5835-1
Ubuntu:22.04:LTScinder2:20.3.1-0ubuntu1.5USN-6882-2
Ubuntu:22.04:LTScinder2:20.1.0-0ubuntu1UBUNTU-CVE-2022-47951
Ubuntu:24.04:LTScinder2:24.0.0-0ubuntu1.3USN-6882-2
Ubuntu:22.04:LTSglance2:24.1.0-0ubuntu1.1USN-5835-2
Ubuntu:22.04:LTSglance2:24.1.0-0ubuntu1.1UBUNTU-CVE-2022-47951
Ubuntu:22.04:LTSnova3:25.1.0-0ubuntu1USN-5835-3
Ubuntu:22.04:LTSnova3:25.1.0-0ubuntu1UBUNTU-CVE-2022-47951

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

References