{"id":"CVE-2015-1856","aliases":["DEBIAN-CVE-2015-1856","EUVD-2022-3554","GHSA-cc77-5vw4-7pwg","PYSEC-2026-931","RHSA-2015:1681","RHSA-2015:1684","RHSA-2015:1845","RHSA-2015:1846","SUSE-SU-2015:1846-1","UBUNTU-CVE-2015-1856","USN-2704-1"],"status":"published","title":"OpenStack Swift Unauthorized delete of versioned Swift object","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","severity":{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04063,"percentile":0.90732,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2015-04-17T00:00:00Z","modified":"2026-09-09T06:47:20Z","fixes":[{"ecosystem":"PyPI","package":"swift","fixed_in":["2.3.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"swift","fixed_in":["2.2.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"swift","fixed_in":["2.2.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"swift","fixed_in":["2.2.0-2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift","fixed_in":["0:2.2.0-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-account","fixed_in":["0:2.2.0-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-container","fixed_in":["0:2.2.0-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-doc","fixed_in":["0:2.2.0-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-object","fixed_in":["0:2.2.0-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-proxy","fixed_in":["0:2.2.0-4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift","fixed_in":["0:1.13.1-6.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-account","fixed_in":["0:1.13.1-6.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-container","fixed_in":["0:1.13.1-6.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-doc","fixed_in":["0:1.13.1-6.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-object","fixed_in":["0:1.13.1-6.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-proxy","fixed_in":["0:1.13.1-6.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift","fixed_in":["0:1.13.1-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-account","fixed_in":["0:1.13.1-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-container","fixed_in":["0:1.13.1-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-doc","fixed_in":["0:1.13.1-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-object","fixed_in":["0:1.13.1-5.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-proxy","fixed_in":["0:1.13.1-5.el7ost"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"swift","fixed_in":["1.13.1-0ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0"}]}],"versions":["1.0.2"]},{"source":"osv","ecosystem":"PyPI","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0"}]}],"versions":["1.0.2"]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el6","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nfs:el6","package":"nfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-9.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nfs:el6","package":"nfs-ganesha-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-9.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nfs:el6","package":"nfs-ganesha-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-9.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nagios:el6","package":"gluster-nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nagios:el6","package":"nagios-server-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"gdeploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-12.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"gluster-nagios-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.5-1.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"gluster-nagios-addons-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.5-1.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"gluster-nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"gstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.65-1.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"gstatus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.65-1.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el6ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"redhat-storage-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.0-2.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"swiftonfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-debug-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-hook-ethtool-options","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-hook-faqemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-hook-openstacknet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-hook-qemucmdline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-jsonrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-python-zombiereaper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-reg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el6","package":"vdsm-yajsonrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el6rhs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nfs:el7","package":"nfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-9.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nfs:el7","package":"nfs-ganesha-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-9.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nfs:el7","package":"nfs-ganesha-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-9.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nagios:el7","package":"gluster-nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nagios:el7","package":"nagios-server-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:nagios:el7","package":"nagios-server-addons-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"gdeploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-12.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"gluster-nagios-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.5-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"gluster-nagios-addons-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.5-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"gluster-nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"gstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.65-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"gstatus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.65-1.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-6.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"redhat-storage-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1.0-2.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"swiftonfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-debug-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-hook-ethtool-options","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-hook-faqemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-hook-openstacknet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-hook-qemucmdline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-jsonrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-python-zombiereaper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-reg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"vdsm-yajsonrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.20-1.3.el7rhgs"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-16.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-0ubuntu1.2"}]}],"versions":["1.10.0~rc1-0ubuntu1","1.10.0-0ubuntu1","1.11.0-0ubuntu2","1.12.0-0ubuntu1","1.13.0-0ubuntu1","1.13.1~rc1-0ubuntu2","1.13.1~rc2-0ubuntu1","1.13.1-0ubuntu1","1.13.1-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-0ubuntu1.2"}]}],"versions":["1.10.0~rc1-0ubuntu1","1.10.0-0ubuntu1","1.11.0-0ubuntu2","1.12.0-0ubuntu1","1.13.0-0ubuntu1","1.13.1~rc1-0ubuntu2","1.13.1~rc2-0ubuntu1","1.13.1-0ubuntu1","1.13.1-0ubuntu1.1"],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"openstack","product":"swift"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-1845.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://bugs.launchpad.net/swift/+bug/1430645","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1846.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1681.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2704-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/74182","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163113.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.openstack.org/pipermail/openstack-announce/2015-April/000349.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1684.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1856","tags":["advisory"]},{"url":"https://git.openstack.org/cgit/openstack/swift/commit/?id=5bb7c286ebb4a54e4d2bd5a02845644d1c651183","tags":["web"]},{"url":"https://git.openstack.org/cgit/openstack/swift/commit/?id=85afe9316570855c87ea731d0627f6f8f2b73264","tags":["web"]},{"url":"https://git.openstack.org/cgit/openstack/swift/commit/?id=dd9d97458ea007024220a78dba8dd663e8b425d7","tags":["web"]},{"url":"https://git.openstack.org/cgit/openstack/swift/commit/?id=f6525758ab2456d688430699338993439597a789","tags":["web"]},{"url":"https://github.com/advisories/GHSA-cc77-5vw4-7pwg","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1856","tags":["advisory"]},{"url":"https://github.com/openstack/swift","tags":["package"]},{"url":"https://pypi.org/project/swift","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1681","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1209994","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1681.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1856","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1856","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1684","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1684.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1845","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Storage/3.1/html/Technical_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1027723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1178100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1215816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1225452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1226665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1226817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1227724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1227759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1228135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1228158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1229606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1229621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1232569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1234213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1234399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1234610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1234708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1236038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1236546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1236672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1236990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1239021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1239075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1240614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1240657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241871","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1244415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1244527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1246946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1247445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1247537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1251360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1251925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1258434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1258810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1258821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1263094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1263581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1263653","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1845.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8177","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1846","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259221","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1846.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151846-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/900253","tags":["report"]},{"url":"https://bugzilla.suse.com/927793","tags":["report"]},{"url":"https://bugzilla.suse.com/942641","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5223","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1856","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2704-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-7960","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-1856","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2015-04-17T17:00:00Z","modified":"2024-08-06T04:54:16.337Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2022-3554","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2015-04-17T17:00:00Z","modified":"2024-08-06T04:54:16Z","updated_at":"2026-11-03T02:22:13.664628Z"}],"ghsa":[{"id":"GHSA-cc77-5vw4-7pwg","title":"OpenStack Swift Unauthorized delete of versioned Swift object","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2022-05-14T03:59:19Z","modified":"2024-05-14T21:30:47Z","updated_at":"2026-11-02T14:37:48.848211Z"}],"nvd":[{"id":"CVE-2015-1856","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2015-04-17T17:59:03.887Z","modified":"2026-06-17T00:23:07.4Z","cvss":[{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:04.095849Z"}],"osv":[{"id":"CVE-2015-1856","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2015-04-17T17:59:03Z","modified":"2026-07-07T11:56:35.661690568Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-1856","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2015-04-17T17:59:03.887Z","modified":"2026-09-09T06:47:20.033686225Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"GHSA-cc77-5vw4-7pwg","title":"OpenStack Swift Unauthorized delete of versioned Swift object","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2022-05-14T03:59:19Z","modified":"2026-07-07T11:56:35.661690568Z","updated_at":"2026-11-02T15:46:44.927642Z"},{"id":"PYSEC-2026-931","title":"OpenStack Swift Unauthorized delete of versioned Swift object","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2026-07-06T08:03:24.286433Z","modified":"2026-07-07T11:45:37.79010869Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2015:1681","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T10:13:12Z","modified":"2026-08-01T10:02:26Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1684","title":"Red Hat Security Advisory: openstack-swift security update","status":"published","published":"2024-09-13T10:12:22Z","modified":"2026-08-01T10:02:26Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1845","title":"Red Hat Security Advisory: Red Hat Gluster Storage 3.1 update","status":"published","published":"2024-09-13T10:12:45Z","modified":"2026-08-08T10:01:33Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1846","title":"Red Hat Security Advisory: Red Hat Gluster Storage 3.1 update","status":"published","published":"2024-09-13T10:12:50Z","modified":"2026-08-08T10:01:33Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1846-1","title":"Security update for openstack-swift","description":"openstack-swift was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2015-1856: OpenStack Object Storage (Swift), when allow_version is configured, allowed remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container (bsc#927793).\n- CVE-2014-7960: OpenStack Object Storage (Swift) allowed remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined (bsc#900253).\n- CVE-2015-5223: Information leak via Swift tempurls (bsc#942641).\n  ","status":"published","published":"2015-10-19T09:00:52Z","modified":"2026-02-04T02:49:50.975769Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-1856","description":"OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.","status":"published","published":"2015-04-17T00:00:00Z","modified":"2026-02-04T03:19:36.070844Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2704-1","title":"swift vulnerabilities","description":"Rajaneesh Singh discovered Swift does not properly enforce metadata\nlimits. An attacker could abuse this issue to store more metadata than\nallowed by policy. (CVE-2014-7960)\n\nClay Gerrard discovered Swift allowed users to delete the latest version\nof object regardless of object permissions when allow_version is\nconfigured. An attacker could use this issue to delete objects.\n(CVE-2015-1856)\n","status":"published","published":"2015-08-06T03:15:17Z","modified":"2026-02-10T04:40:55Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}