Openstack · Openstack Object Storage · CVE-2015-5223
**Name of the Vulnerable Software and Affected Versions**
OpenStack Object Storage (Swift) versions prior to 2.4.0
**Description**
The issue allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.
**Recommendations**
For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue.