CVE-2015-7548: Infoleak
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and usecowimages is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7548?
CVE-2015-7548 is considered a critical vulnerability due to its ability to allow remote authenticated users to read arbitrary files.
How do I fix CVE-2015-7548?
To fix CVE-2015-7548, upgrade OpenStack Nova to version 2015.1.3 or later for Kilo and 12.0.1 or later for Liberty.
What versions of OpenStack Nova are affected by CVE-2015-7548?
CVE-2015-7548 affects OpenStack Nova versions before 2015.1.3 in Kilo and before 12.0.1 in Liberty.
What are the implications of CVE-2015-7548?
The implications of CVE-2015-7548 include the potential exposure of sensitive data due to arbitrary file access by unauthorized users.
Who is vulnerable to CVE-2015-7548?
Organizations using vulnerable versions of OpenStack Nova with libvirt configured to use_cow_images set to false are at risk for CVE-2015-7548.