Total vulnerabilities in the database
The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.
Software | From | Fixed in |
---|---|---|
openstack / cinder | 2013.1.2 | 2013.1.2.x |
openstack / cinder | 2013.1.1 | 2013.1.1.x |