製品・ソフトウェアに関する情報

JVN脆弱性詳細

OpenStack DBaaS におけるリンク解釈に関する脆弱性

Title	OpenStack DBaaS におけるリンク解釈に関する脆弱性
Summary	OpenStack DBaaS (別名 Trove) には、リンク解釈に関する脆弱性が存在します。
Possible impacts	情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 3, 2015, midnight
Registration Date	Sept. 15, 2017, 12:02 p.m.
Last Update	Sept. 15, 2017, 12:02 p.m.

CVSS3.0 : 警告
Score	5.5
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS2.0 : 注意
Score	2.1
Vector	AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected System

OpenStack

OpenStack Trove 2015.1.0 (kilo) 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-3156	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3156
National Vulnerability Database (NVD)
2	CVE-2015-3156	https://nvd.nist.gov/vuln/detail/CVE-2015-3156

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-59	https://jvndb.jvn.jp/ja/cwe/CWE-59.html

ベンダー情報

No	Name	URL
Launchpad
1	Bug #1398195	https://bugs.launchpad.net/trove/+bug/1398195
Red Hat Bugzilla
2	Bug 1216073	https://bugzilla.redhat.com/show_bug.cgi?id=1216073

Change Log

No	Changed Details	Date of change
0	[2017年09月15日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2015-3156

Summary	The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.
Publication Date	Aug. 12, 2017, 6:29 a.m.
Registration Date	Jan. 26, 2021, 2:49 p.m.
Last Update	Nov. 21, 2024, 11:28 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:openstack:trove::::::::			2014.2.4

Related information, measures and tools

No	URL	タグ
1	https://bugs.launchpad.net/trove/+bug/1398195	Issue Tracking Third Party Advisory VDB Entry
2	https://bugs.launchpad.net/trove/+bug/1398195	Issue Tracking Third Party Advisory VDB Entry
3	https://bugzilla.redhat.com/show_bug.cgi?id=1216073	Issue Tracking Third Party Advisory VDB Entry
4	https://bugzilla.redhat.com/show_bug.cgi?id=1216073	Issue Tracking Third Party Advisory VDB Entry
5	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/service.py#L230	Third Party Advisory
6	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/service.py#L230	Third Party Advisory
7	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/mongodb/service.py#L176	Third Party Advisory
8	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/mongodb/service.py#L176	Third Party Advisory
9	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/redis/service.py#L236	Third Party Advisory
10	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/redis/service.py#L236	Third Party Advisory
11	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/mysql/service.py#L790	Third Party Advisory
12	https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/mysql/service.py#L790	Third Party Advisory
13	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/experimental/couchbase_impl.py#L30	Third Party Advisory
14	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/experimental/couchbase_impl.py#L30	Third Party Advisory
15	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L110	Third Party Advisory
16	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L110	Third Party Advisory
17	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L36	Third Party Advisory
18	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L36	Third Party Advisory
19	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L55	Third Party Advisory
20	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L55	Third Party Advisory
21	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/restore/mysql_impl.py#L194	Third Party Advisory
22	https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/restore/mysql_impl.py#L194	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-59	リンク解釈の問題	https://cwe.mitre.org/data/definitions/59.html