CVE-2014-7960: Medium severity openstack swift3 vulnerability
Published Oct 17, 2014
·Updated
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the maxmetacount and other metadata constraints via multiple crafted requests which exceed the limit when combined.
Affected Software
2 affected componentsFixes available
pip/swift<2.2.0
2.2.0
Openstack Swift<=2.1.0
Event History
Oct 17, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2014-7960?
CVE-2014-7960 is considered to have a medium severity due to its ability to allow authenticated users to bypass metadata constraints.
2
How do I fix CVE-2014-7960?
To fix CVE-2014-7960, upgrade to OpenStack Object Storage (Swift) version 2.2.0 or later.
3
What systems are affected by CVE-2014-7960?
CVE-2014-7960 affects OpenStack Object Storage (Swift) versions prior to 2.2.0.
4
Can CVE-2014-7960 be exploited by unauthenticated users?
No, CVE-2014-7960 can only be exploited by remote authenticated users.
5
What are the risks of CVE-2014-7960?
The risks of CVE-2014-7960 include unauthorized overwriting of metadata constraints, which can lead to data integrity issues.