CVE:CVE-2022-47951
CNNVD:CNNVD-202301-1776
OpenStack是美国美国国家航空航天局（NASA）的一个云平台管理项目。
OpenStack Cinder、glance、nova存在安全漏洞，该漏洞源于通过提供一个专门创建的引用特定备份文件路径的VMDK平面图像，经过验证的用户可以说服系统从服务器返回该文件内容的副本，从而导致对潜在敏感数据的未授权访问。
solution:Upgrade openstack cinder to a higher version than 19.1.2,20.0.2,and avoid the version (,19.1.2],[20.0.0,20.0.2); Upgrade openstack glance to a higher version than 23.0.1,24.1.1,and avoid the version (,23.0.1),[24.0.0,24.1.1); Upgrade openstack nova to a higher version than 24.1.2,25.0.2,and avoid the version (,24.1.2),[25.0.0,25.0.2); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0