CVE-2022-47951: Path Traversal
An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/cinderto a version that resolves this vulnerability.Fixed in 2:21.3.1-1~deb12u1Fixed in 2:26.0.0-2Fixed in 2:29.0.0-3 - Upgrade
Upgrade
debian/glanceto a version that resolves this vulnerability.Fixed in 2:25.1.0-2+deb12u3Fixed in 2:25.1.0-2+deb12u5Fixed in 2:30.0.0-3+deb13u2Fixed in 2:33.0.0-6 - Upgrade
Upgrade
debian/novato a version that resolves this vulnerability.Fixed in 2:26.2.2-1~deb12u4Fixed in 2:31.0.0-6+deb13u2Fixed in 2:34.0.0-4 - Upgrade
Upgrade
debian/cinderto a version that resolves this vulnerability.Fixed in 2:21.0.0-3 - Upgrade
Upgrade
debian/glanceto a version that resolves this vulnerability.Fixed in 2:25.0.0-2 - Upgrade
Upgrade
debian/novato a version that resolves this vulnerability.Fixed in 2:26.0.0-6 - Upgrade
Upgrade
OpenStack Cinderto a version that resolves this vulnerability.Fixed in 19.1.2 - Upgrade
Upgrade
OpenStack Cinderto a version that resolves this vulnerability.Fixed in 20.0.2 - Upgrade
Upgrade
OpenStack Glanceto a version that resolves this vulnerability.Fixed in 23.0.1 - Upgrade
Upgrade
OpenStack Glanceto a version that resolves this vulnerability.Fixed in 24.1.1 - Upgrade
Upgrade
OpenStack Novato a version that resolves this vulnerability.Fixed in 24.1.2 - Upgrade
Upgrade
OpenStack Novato a version that resolves this vulnerability.Fixed in 25.0.2
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47951?
The severity of CVE-2022-47951 is medium with a CVSS score of 5.7.
Which software versions are affected by CVE-2022-47951?
OpenStack Cinder versions before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0 are affected by CVE-2022-47951.
How can I fix CVE-2022-47951?
To fix CVE-2022-47951, you should update to the following package versions: Cinder 2:13.0.7-1+deb10u2, 2:17.0.1-1+deb11u1, 2:21.1.0-3, and 2:23.0.0-1; Glance 2:17.0.0-5+deb10u1, 2:21.0.0-2+deb11u1, 2:25.1.0-2, and 2:27.0.0-1; Nova 2:18.1.0-6+deb10u2, 2:22.0.1-2+deb11u1, 2:26.1.0-4, and 2:28.0.0-2.
Where can I find more information about CVE-2022-47951?
Additional information about CVE-2022-47951 can be found at the following references: [1] https://security-tracker.debian.org/tracker/CVE-2022-47951 [2] https://launchpad.net/bugs/1996188 [3] https://salsa.debian.org/openstack-team/services/glance/-/commit/4cc1d20d6a74b855fda0c73892533b0613ecac36
What is the Common Weakness Enumeration (CWE) ID of CVE-2022-47951?
The Common Weakness Enumeration (CWE) ID of CVE-2022-47951 is 22.