The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| openstack / cinder | 2013.1.2 | 2013.1.2.x |
| openstack / cinder | 2013.1.1 | 2013.1.1.x |