Approved changes feed: RSS · Atom

cpe:2.3:a:openstack_foundation:openstack-cinder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenstack Foundation (9f38d402-1c5a-5ca6-94de-404060e81fcf)
ProductOpenstack Cinder (fe95c8b9-7696-5069-b59f-e6b1e4fdfb37)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15139 vulnerable 2026-06-08 05:08:57.995334 Details available
MEDIUM (5.1)
A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants.
Published: 2018-08-27T17:00:00.000Z
Updated: 2024-08-05T19:50:16.404Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.