Every CVE Search/ Get API key

CVE-2015-1856

OpenStack Swift Unauthorized delete of versioned Swift object

5.5 MediumFix available

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Exploit likelihood

3.95%Up 2.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
CVE-2015-1856
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:N/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
CVE-2015-1856
Updated
2026-11-02
EUVDEUVD-2022-3554 No score

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
EUVD-2022-3554
Updated
2026-11-03
GitHub AdvisoriesGHSA-cc77-5vw4-7pwg No score

OpenStack Swift Unauthorized delete of versioned Swift object

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
GHSA-cc77-5vw4-7pwg
Updated
2026-11-02
OSV No score

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
CVE-2015-1856
Updated
2026-11-02
OSVDEBIAN-CVE-2015-1856 No score

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
DEBIAN-CVE-2015-1856
Updated
2026-11-02
Show 5 moreShow less
OSVGHSA-cc77-5vw4-7pwg No score

OpenStack Swift Unauthorized delete of versioned Swift object

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
GHSA-cc77-5vw4-7pwg
Updated
2026-11-02
OSVPYSEC-2026-931 No score

OpenStack Swift Unauthorized delete of versioned Swift object

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
PYSEC-2026-931
Updated
2026-11-02
OSVSUSE-SU-2015:1846-1 No score

Security update for openstack-swift

openstack-swift was updated to fix three security issues.

These security issues were fixed:

  • CVE-2015-1856: OpenStack Object Storage (Swift), when allow_version is configured, allowed remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container (bsc#927793).
  • CVE-2014-7960: OpenStack Object Storage (Swift) allowed remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined (bsc#900253).
  • CVE-2015-5223: Information leak via Swift tempurls (bsc#942641).
Record
SUSE-SU-2015:1846-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-1856 No score

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Record
UBUNTU-CVE-2015-1856
Updated
2026-11-02
OSVUSN-2704-1 No score

swift vulnerabilities

Rajaneesh Singh discovered Swift does not properly enforce metadata limits. An attacker could abuse this issue to store more metadata than allowed by policy. (CVE-2014-7960)

Clay Gerrard discovered Swift allowed users to delete the latest version of object regardless of object permissions when allow_version is configured. An attacker could use this issue to delete objects. (CVE-2015-1856)

Record
USN-2704-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
swift
PyPI
 before 2.3.0
2.3.0
swift
Debian:12
 before 2.2.0-2
2.2.0-2
swift
Debian:13
 before 2.2.0-2
2.2.0-2
swift
Debian:14
 before 2.2.0-2
2.2.0-2
swift
PyPI
 before 2.3.0, plus listed versions
1.0.2
2.3.0
openstack-swift
Red Hat:openstack:6::el7
 before 0:2.2.0-4.el7ost
0:2.2.0-4.el7ost
openstack-swift-account
Red Hat:openstack:6::el7
 before 0:2.2.0-4.el7ost
0:2.2.0-4.el7ost
openstack-swift-container
Red Hat:openstack:6::el7
 before 0:2.2.0-4.el7ost
0:2.2.0-4.el7ost
openstack-swift-doc
Red Hat:openstack:6::el7
 before 0:2.2.0-4.el7ost
0:2.2.0-4.el7ost
openstack-swift-object
Red Hat:openstack:6::el7
 before 0:2.2.0-4.el7ost
0:2.2.0-4.el7ost
Show 140 moreShow less
Affected packages
PackageAffectedFixed
openstack-swift-proxy
Red Hat:openstack:6::el7
 before 0:2.2.0-4.el7ost
0:2.2.0-4.el7ost
openstack-swift
Red Hat:openstack:5::el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-account
Red Hat:openstack:5::el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-container
Red Hat:openstack:5::el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-doc
Red Hat:openstack:5::el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-object
Red Hat:openstack:5::el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-proxy
Red Hat:openstack:5::el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift
Red Hat:openstack:5::el7
 before 0:1.13.1-5.el7ost
0:1.13.1-5.el7ost
openstack-swift-account
Red Hat:openstack:5::el7
 before 0:1.13.1-5.el7ost
0:1.13.1-5.el7ost
openstack-swift-container
Red Hat:openstack:5::el7
 before 0:1.13.1-5.el7ost
0:1.13.1-5.el7ost
openstack-swift-doc
Red Hat:openstack:5::el7
 before 0:1.13.1-5.el7ost
0:1.13.1-5.el7ost
openstack-swift-object
Red Hat:openstack:5::el7
 before 0:1.13.1-5.el7ost
0:1.13.1-5.el7ost
openstack-swift-proxy
Red Hat:openstack:5::el7
 before 0:1.13.1-5.el7ost
0:1.13.1-5.el7ost
nfs-ganesha
Red Hat:storage:3.1:nfs:el6
 before 0:2.2.0-9.el6rhs
0:2.2.0-9.el6rhs
nfs-ganesha-debuginfo
Red Hat:storage:3.1:nfs:el6
 before 0:2.2.0-9.el6rhs
0:2.2.0-9.el6rhs
nfs-ganesha-gluster
Red Hat:storage:3.1:nfs:el6
 before 0:2.2.0-9.el6rhs
0:2.2.0-9.el6rhs
gluster-nagios-common
Red Hat:storage:3.1:nagios:el6
 before 0:0.2.2-1.el6rhs
0:0.2.2-1.el6rhs
nagios-server-addons
Red Hat:storage:3.1:nagios:el6
 before 0:0.2.2-1.el6rhs
0:0.2.2-1.el6rhs
gdeploy
Red Hat:storage:3.1:server:el6
 before 0:1.0-12.el6rhs
0:1.0-12.el6rhs
gluster-nagios-addons
Red Hat:storage:3.1:server:el6
 before 0:0.2.5-1.el6rhs
0:0.2.5-1.el6rhs
gluster-nagios-addons-debuginfo
Red Hat:storage:3.1:server:el6
 before 0:0.2.5-1.el6rhs
0:0.2.5-1.el6rhs
gluster-nagios-common
Red Hat:storage:3.1:server:el6
 before 0:0.2.2-1.el6rhs
0:0.2.2-1.el6rhs
glusterfs
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-api
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-api-devel
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-cli
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-client-xlators
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-debuginfo
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-devel
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-fuse
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-ganesha
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-geo-replication
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-libs
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-rdma
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
glusterfs-server
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
gstatus
Red Hat:storage:3.1:server:el6
 before 0:0.65-1.el6rhs
0:0.65-1.el6rhs
gstatus-debuginfo
Red Hat:storage:3.1:server:el6
 before 0:0.65-1.el6rhs
0:0.65-1.el6rhs
openstack-swift
Red Hat:storage:3.1:server:el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-account
Red Hat:storage:3.1:server:el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-container
Red Hat:storage:3.1:server:el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-doc
Red Hat:storage:3.1:server:el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-object
Red Hat:storage:3.1:server:el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
openstack-swift-proxy
Red Hat:storage:3.1:server:el6
 before 0:1.13.1-6.el6ost
0:1.13.1-6.el6ost
python-gluster
Red Hat:storage:3.1:server:el6
 before 0:3.7.1-16.el6rhs
0:3.7.1-16.el6rhs
redhat-storage-server
Red Hat:storage:3.1:server:el6
 before 0:3.1.1.0-2.el6rhs
0:3.1.1.0-2.el6rhs
swiftonfile
Red Hat:storage:3.1:server:el6
 before 0:1.13.1-5.el6rhs
0:1.13.1-5.el6rhs
vdsm
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-cli
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-debug-plugin
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-debuginfo
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-gluster
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-hook-ethtool-options
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-hook-faqemu
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-hook-openstacknet
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-hook-qemucmdline
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-jsonrpc
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-python
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-python-zombiereaper
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-reg
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-tests
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-xmlrpc
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
vdsm-yajsonrpc
Red Hat:storage:3.1:server:el6
 before 0:4.16.20-1.3.el6rhs
0:4.16.20-1.3.el6rhs
glusterfs
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-api
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-api-devel
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-cli
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-client-xlators
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-debuginfo
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-devel
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-fuse
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-libs
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
glusterfs-rdma
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
python-gluster
Red Hat:storage:3:client:el6
 before 0:3.7.1-16.el6
0:3.7.1-16.el6
nfs-ganesha
Red Hat:storage:3.1:nfs:el7
 before 0:2.2.0-9.el7rhgs
0:2.2.0-9.el7rhgs
nfs-ganesha-debuginfo
Red Hat:storage:3.1:nfs:el7
 before 0:2.2.0-9.el7rhgs
0:2.2.0-9.el7rhgs
nfs-ganesha-gluster
Red Hat:storage:3.1:nfs:el7
 before 0:2.2.0-9.el7rhgs
0:2.2.0-9.el7rhgs
gluster-nagios-common
Red Hat:storage:3.1:nagios:el7
 before 0:0.2.2-1.el7rhgs
0:0.2.2-1.el7rhgs
nagios-server-addons
Red Hat:storage:3.1:nagios:el7
 before 0:0.2.2-1.el7rhgs
0:0.2.2-1.el7rhgs
nagios-server-addons-debuginfo
Red Hat:storage:3.1:nagios:el7
 before 0:0.2.2-1.el7rhgs
0:0.2.2-1.el7rhgs
gdeploy
Red Hat:storage:3.1:server:el7
 before 0:1.0-12.el7rhgs
0:1.0-12.el7rhgs
gluster-nagios-addons
Red Hat:storage:3.1:server:el7
 before 0:0.2.5-1.el7rhgs
0:0.2.5-1.el7rhgs
gluster-nagios-addons-debuginfo
Red Hat:storage:3.1:server:el7
 before 0:0.2.5-1.el7rhgs
0:0.2.5-1.el7rhgs
gluster-nagios-common
Red Hat:storage:3.1:server:el7
 before 0:0.2.2-1.el7rhgs
0:0.2.2-1.el7rhgs
glusterfs
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-api
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-api-devel
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-cli
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-client-xlators
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-debuginfo
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-devel
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-fuse
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-ganesha
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-geo-replication
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-libs
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-rdma
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
glusterfs-server
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
gstatus
Red Hat:storage:3.1:server:el7
 before 0:0.65-1.el7rhgs
0:0.65-1.el7rhgs
gstatus-debuginfo
Red Hat:storage:3.1:server:el7
 before 0:0.65-1.el7rhgs
0:0.65-1.el7rhgs
openstack-swift
Red Hat:storage:3.1:server:el7
 before 0:1.13.1-6.el7ost
0:1.13.1-6.el7ost
openstack-swift-account
Red Hat:storage:3.1:server:el7
 before 0:1.13.1-6.el7ost
0:1.13.1-6.el7ost
openstack-swift-container
Red Hat:storage:3.1:server:el7
 before 0:1.13.1-6.el7ost
0:1.13.1-6.el7ost
openstack-swift-doc
Red Hat:storage:3.1:server:el7
 before 0:1.13.1-6.el7ost
0:1.13.1-6.el7ost
openstack-swift-object
Red Hat:storage:3.1:server:el7
 before 0:1.13.1-6.el7ost
0:1.13.1-6.el7ost
openstack-swift-proxy
Red Hat:storage:3.1:server:el7
 before 0:1.13.1-6.el7ost
0:1.13.1-6.el7ost
python-gluster
Red Hat:storage:3.1:server:el7
 before 0:3.7.1-16.el7rhgs
0:3.7.1-16.el7rhgs
redhat-storage-server
Red Hat:storage:3.1:server:el7
 before 0:3.1.1.0-2.el7rhgs
0:3.1.1.0-2.el7rhgs
swiftonfile
Red Hat:storage:3.1:server:el7
 before 0:1.13.1-5.el7rhgs
0:1.13.1-5.el7rhgs
vdsm
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-cli
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-debug-plugin
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-debuginfo
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-gluster
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-hook-ethtool-options
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-hook-faqemu
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-hook-openstacknet
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-hook-qemucmdline
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-jsonrpc
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-python
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-python-zombiereaper
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-reg
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-tests
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-xmlrpc
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
vdsm-yajsonrpc
Red Hat:storage:3.1:server:el7
 before 0:4.16.20-1.3.el7rhgs
0:4.16.20-1.3.el7rhgs
glusterfs
Red Hat:enterprise_linux:7::hypervisor
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-cli
Red Hat:enterprise_linux:7::hypervisor
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-debuginfo
Red Hat:enterprise_linux:7::hypervisor
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-api
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-api-devel
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-cli
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-client-xlators
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-debuginfo
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-devel
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-fuse
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-libs
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
glusterfs-rdma
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
python-gluster
Red Hat:storage:3:client:el7
 before 0:3.7.1-16.el7
0:3.7.1-16.el7
openstack-swift
SUSE:OpenStack Cloud 5
 before 2.1.0-11.1
2.1.0-11.1
openstack-swift-doc
SUSE:OpenStack Cloud 5
 before 2.1.0-11.1
2.1.0-11.1
swift
Ubuntu:14.04:LTS
 before 1.13.1-0ubuntu1.2, plus listed versions
1.10.0~rc1-0ubuntu11.10.0-0ubuntu11.11.0-0ubuntu21.12.0-0ubuntu11.13.0-0ubuntu1
Show 4 moreShow less
1.13.1~rc1-0ubuntu21.13.1~rc2-0ubuntu11.13.1-0ubuntu11.13.1-0ubuntu1.1
1.13.1-0ubuntu1.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1856 is a medium vulnerability (CVSS 5.5) in Openstack Swift, published April 17, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.95%, the 90th percentile. Fixed in swift 2.3.0.

References

Show 138 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open