cve/2015/CVE-2015-5223.md

CVE-2015-5223

Description

OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• https://bugs.launchpad.net/swift/+bug/1449212

Github

No PoCs found on GitHub currently.