PT-2013-4891 · Openstack · Openstack Cinder

Rongze Zhu · Published 2013-09-16 · Updated 2022-05-17 · CVE-2013-4183

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenStack Cinder versions 2013.1.1 through 2013.1.2

Description The issue concerns the clear volume function in the LVMVolumeDriver driver, which fails to properly clear data when a snapshot is deleted. This allows local users to access sensitive information through unspecified means.

Recommendations For OpenStack Cinder versions 2013.1.1 through 2013.1.2, consider updating to a version where this issue is resolved, as the provided information does not specify the exact fixed version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-4183

GHSA-Q3RW-WCJ6-8CJF

PYSEC-2013-35

RHSA-2013:1198

Affected Products

Openstack Cinder

References · 15

• https://osv.dev/vulnerability/GHSA-q3rw-wcj6-8cjf · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1198.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4183 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4183 · Vendor Advisory
• http://ubuntu.com/usn/USN-2005-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-4183 · Vendor Advisory
• https://ubuntu.com/usn/USN-2005-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2013-35 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-4183 · Vendor Advisory
• https://github.com/openstack/cinder/commit/0ee31073c5cb432a9cdd2648e99aa802b0ed0a17 · Note
• https://github.com/openstack/cinder · Note
• https://github.com/openstack/cinder/commit/68c597e26b5659a036a7a937622e539bac102308 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/cinder/PYSEC-2013-35.yaml · Note
• https://rhn.redhat.com/errata/RHSA-2013-1198.html · Note
• https://bugs.launchpad.net/cinder/+bug/1198185 · Note