The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path.
| Software | From | Fixed in |
|---|---|---|
| redhat / openstack | 5.0 | 5.0.x |
| redhat / openstack | 6.0 | 6.0.x |