CVE-2022-47951

Severity: medium (CVSS 5.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-01-26 · updated 2026-06-17
Weakness: CWE-22

Description

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.

Affected products

Debian Linux: 10.0, 11.0
OpenStack Cinder: through 19.1.2; from 20.0.0 before 20.0.2 — fixed in 20.0.2
OpenStack Glance: before 23.0.1; from 24.0.0 before 24.1.1 — fixed in 23.0.1, 24.1.1
OpenStack Nova: before 24.1.2; from 25.0.0 before 25.0.2 — fixed in 24.1.2, 25.0.2

How to fix

Upgrade to a fixed version: OpenStack Cinder 20.0.2; OpenStack Glance 23.0.1, 24.1.1; OpenStack Nova 24.1.2, 25.0.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-47951 or the next vulnerability affects your stack