# cinder (PyPI) vulnerabilities

9 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/cinder/

## Advisories (9)

### [CVE-2024-32498](https://cve.now/CVE-2024-32498): An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3.

- Severity: Medium 6.5
- Published: Jul 5, 2024
- Affected: through 24.0.0.

### [CVE-2022-47951](https://cve.now/CVE-2022-47951): An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and…

- Severity: Medium 5.7
- Published: Jan 26, 2023
- Affected: fixed in 19.1.2; from 20.0.0, fixed in 20.0.2; fixed in 19.1.2; from 20.0.0, fixed in 20.0.2.

### [CVE-2020-10755](https://cve.now/CVE-2020-10755): An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x…

- Severity: Medium 6.5
- Published: Jun 10, 2020
- Affected: from 14.0.0, fixed in 14.1.0; from 15.0.0, fixed in 15.2.0; from 16.0.0, fixed in 16.1.0; fixed in 14.1.0; from 15.0.0, fixed in 15.2.0; from 16.0.0, fixed in 16.1.0.

### [CVE-2013-2255](https://cve.now/CVE-2013-2255): HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate…

- Severity: Unrated
- Published: Nov 1, 2019
- Affected: fixed in 7.0.0a0.

### [CVE-2015-5162](https://cve.now/CVE-2015-5162): The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0…

- Severity: Unrated
- Published: Oct 7, 2016
- Affected: fixed in 7.0.2; from 8.0.0, fixed in 9.0.0; fixed in 7.0.2; from 8.0.0, fixed in 9.0.0.

### [CVE-2015-1851](https://cve.now/CVE-2015-1851): OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote…

- Severity: Unrated
- Published: Jun 25, 2015
- Affected: fixed in 7.0.0a0.

### [CVE-2014-3641](https://cve.now/CVE-2014-3641): The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data…

- Severity: Unrated
- Published: Oct 8, 2014
- Affected: fixed in 2014.1.3.

### [CVE-2013-4202](https://cve.now/CVE-2013-4202): The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume\_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and…

- Severity: Unrated
- Published: Sep 16, 2013
- Affected: fixed in 7.0.0a0.

### [CVE-2013-4183](https://cve.now/CVE-2013-4183): The clear\_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when…

- Severity: Unrated
- Published: Sep 16, 2013
- Affected: fixed in 7.0.0a0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/cinder
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.