CVE-2015-1195 json
OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme
published 2015-01-21 11 y ago modified 2026-07-07 4 mo ago also GHSA-pwrj-f53c-f89j , PYSEC-2026-815 , EUVD-2022-4842
- cvss
- 6.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.8%
- EPSS 2.8% chance of exploitation in 30 days, percentile 86%
- public exploits
- 0
- none known
Summary
The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.
Patch / fix
- pypi glance 11.0.0a0
- openstack image_registry_and_delivery_service_(glance) 2014.1.4, 2014.2.2
- glance Debian 14, Debian 13, Debian 12 2014.1.3-11
debian advisories DEBIAN-CVE-2015-1195
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2015-1195 updated cvss 5.5
openstack-glance: unrestricted path traversal flaw (incomplete fix for CVE-2014-9493) (OSSA 2015-002)
-
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) openstack-glance Red Hat Enterprise Linux OpenStack Platform 6 (Juno) openstack-glance Red Hat OpenStack Platform 4 openstack-glance Red Hat OpenStack Platform 13 (Queens) python-glance, openstack-glance, python-glance-tests Red Hat OpenStack Platform 16.2 python3-glance, openstack-glance Red Hat OpenStack Platform 17.1 python3-glance, openstack-glancenot affected: vulnerable code not present
+1 more productsfewer
Red Hat OpenStack Platform 18.0 openstack-glance
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
2.79% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | glance | <11.0.0a0 |
11.0.0a0 |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/openstack/glance/commit/5191ed1879c5fd5b2694f922bcedec232f461088
web
-
github.com
/openstack/glance/commit/7d3a1db33ccbd25b9fc7326ce3468eabd2a41a99
web
-
github.com
/openstack/glance/commit/a2d986b976e9325a272e2d422465165315d19fe6
web
-
lists.openstack.org
/pipermail/openstack-announce/2015-January/000325.html
mailing-list, web, vendor-advisory
-
bugs.launchpad.net
/ossa/+bug/1408663
web, third-party-advisory
-
openwall.com
/lists/oss-security/2015/01/18/5
mailing-list, web, third-party-advisory
-
secunia.com
/advisories/62169
third-party-advisory, web
-
openwall.com
/lists/oss-security/2015/01/15/2
mailing-list, web, third-party-advisory
-
securityfocus.com
/bid/71976
vdb-entry, web, third-party-advisory
-
oracle.com
/technetwork/topics/security/bulletinapr2015-2511959.html
web, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2015-1195
advisory
-
github.com
/openstack/glance
package
-
pypi.org
/project/glance
package
-
github.com
/advisories/GHSA-pwrj-f53c-f89j
advisory
Sources
- CVE List CVE-2015-1195
- GitHub Advisory GHSA-pwrj-f53c-f89j
- NVD CVE-2015-1195
- OSV PYSEC-2026-815
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.