CVE-2015-7514
UnknownEPSS 1.58%
Last modified
CVE-2015-7514 is a vulnerability of currently unknown severity. OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.. EPSS estimates a 1.58% chance of exploitation in the next 30 days.
Description
OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openstack | Ironic | 4.2.0 |
| Openstack | Ironic | 4.2.1 |
References
- http://www.openwall.com/lists/oss-security/2015/12/03/4Mailing List, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1285809Issue Tracking, Patch, Third Party Advisory, VDB Entry
- https://review.openstack.org/#/c/252993Issue Tracking, Patch, Vendor Advisory
- https://review.openstack.org/#/c/253001Issue Tracking, Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2015/12/03/4Mailing List, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1285809Issue Tracking, Patch, Third Party Advisory, VDB Entry
- https://review.openstack.org/#/c/252993Issue Tracking, Patch, Vendor Advisory
- https://review.openstack.org/#/c/253001Issue Tracking, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-7514?
OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.
How severe is CVE-2015-7514?
Severity scoring for CVE-2015-7514 is pending analysis. The EPSS model estimates a 1.58% probability of exploitation in the next 30 days.
How do I fix CVE-2015-7514?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-7508Heap-based buffer overflow in the bmp_decode_rle function in…8.8
- CVE-2015-7509fs/ext4/namei.c in the Linux kernel before 3.7 allows physic…
- CVE-2015-7510Stack-based buffer overflow in the getpwnam and getgrnam fun…
- CVE-2015-7511Libgcrypt before 1.6.5 does not properly perform elliptic-po…
- CVE-2015-7512Buffer overflow in the pcnet_receive function in hw/net/pcne…9
- CVE-2015-7513arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not r…6.5
- CVE-2015-7515The aiptek_probe function in drivers/input/tablet/aiptek.c i…4.6
- CVE-2015-7516ONOS before 1.5.0 when using the ifwd app allows remote atta…
- CVE-2015-7517Multiple SQL injection vulnerabilities in the Double Opt-In …
- CVE-2015-7518Multiple cross-site scripting (XSS) vulnerabilities in infor…
- CVE-2015-7519agent/Core/Controller/SendRequest.cpp in Phusion Passenger b…
- CVE-2015-7520Multiple cross-site scripting (XSS) vulnerabilities in the (…
Are you affected by CVE-2015-7514?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST