OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade swift | Jul 30, 2024 | Apr 17, 2015 |
| Oracle Solaris | — | Upgrade cloud/openstack/swift to version 2.2.2-0.175.2.10.0.5.0 on Solaris 11.2 | May 29, 2017 | Apr 17, 2015 |
| Ubuntu | — | Upgrade swift | Nov 8, 2024 | Apr 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub