medium4.0
CVE-2015-0271
The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via…
Impact
The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Openstack | Versions 5.0, 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2015-0645.html
- http://rhn.redhat.com/errata/RHSA-2015-0840.html
- http://rhn.redhat.com/errata/RHSA-2015-0841.html
- http://rhn.redhat.com/errata/RHSA-2015-0645.html
- http://rhn.redhat.com/errata/RHSA-2015-0840.html
- http://rhn.redhat.com/errata/RHSA-2015-0841.html