CVE-2015-1856
OpenStack Swift Unauthorized delete of versioned Swift object
EPSS 0.86%
Description
OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.
How to fix CVE-2015-1856
To remediate CVE-2015-1856, upgrade the affected package to a fixed version below.
- Debian/swift—upgrade to 2.2.0-2 or later
- PyPI/swift—upgrade to 2.3.0 or later
Is CVE-2015-1856 being exploited?
Low — EPSS is 0.9%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 2.2.0-2
- from 0, < 2.3.0