CVE-2017-7200 in OpenStack Glance
Summary
An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.
Reservation
03/20/2017
Disclosure
03/21/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 98336 | OpenStack Glance Image Service API v1 Portscan server-side request forgery | 918 | Not defined | Official fix | CVE-2017-7200 |