VULNERABILITY INTELLIGENCE
CVE-2015-5251
CVSS score5.5 NONE
EPSS probability2.05%
CISA KEVNot currently listed
Published2015-10-26
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:P
Description
OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.
Weakness classification
- nvd@nist.gov: CWE-264