PT-2017-17570 · Openstack · Openstack Glance

Luke Hinds · Publicado 2017-03-21 · Atualizado 2022-05-17 · CVE-2017-7200

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Glance versions prior to Newton

Description A Server-Side Request Forgery (SSRF) issue was discovered, allowing an attacker to perform masked network port scans through the 'copy from' feature in the Image Service API v1. This enables the creation of images with a URL such as 'http://localhost:22', which can then be used to enumerate internal network details while appearing masked, as the scan would seem to originate from the Glance Image service.

Recommendations For versions prior to Newton, consider disabling the 'copy from' feature in the Image Service API v1 as a temporary workaround to minimize the risk of exploitation. Restrict access to the Image Service API v1 to prevent potential attackers from creating malicious images.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2017-7200

GHSA-J6MR-CM6X-H6JG

Produtos afetados

Openstack Glance

Referências · 14

• https://github.com/openstack/glance · Nota
• https://github.com/openstack/glance/commit/b1ac90f7914d91b25144cc4063fa994fb5019ee3 · Nota
• http://securityfocus.com/bid/96988 · Nota
• https://bugs.launchpad.net/ossn/+bug/1153614 · Nota
• https://osv.dev/vulnerability/GHSA-j6mr-cm6x-h6jg · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7200 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2017-7200 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-7200 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-7200 · Aviso do Fabricante
• https://wiki.openstack.org/wiki/OSSN/OSSN-0078 · Aviso do Fabricante
• https://bugs.launchpad.net/ossn/+bug/1606495 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-7200 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7200 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7200 · Aviso do Fabricante