{"action":"Upgrade cinder to 2014.1.3 or later.","affected":[{"fixed":"2014.1.3","introduced":"0"}],"component":"cinder","cve_ids":["CVE-2014-3641"],"ecosystem":"PyPI","epss":0.01875,"exploited":false,"fixed_versions":["2014.1.3"],"ghsa_id":"GHSA-qhch-g8qr-p497","id":"tcs_01M5KFW5F0EVFYY7XNJKR344TR","modified_at":"2026-09-10T03:49:39.734477851Z","published_at":"2022-05-17T04:21:11Z","references":["https://osv.dev/vulnerability/GHSA-qhch-g8qr-p497","https://nvd.nist.gov/vuln/detail/CVE-2014-3641","https://access.redhat.com/errata/RHSA-2014:1787","https://access.redhat.com/errata/RHSA-2014:1788","https://access.redhat.com/security/cve/CVE-2014-3641","https://bugs.launchpad.net/cinder/+bug/1350504","https://bugzilla.redhat.com/show_bug.cgi?id=1141996","https://opendev.org/openstack/cinder","https://web.archive.org/web/20200228053848/http://www.securityfocus.com/bid/70221","http://rhn.redhat.com/errata/RHSA-2014-1787.html","http://rhn.redhat.com/errata/RHSA-2014-1788.html","http://seclists.org/oss-sec/2014/q4/78","http://www.ubuntu.com/usn/USN-2405-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qhch-g8qr-p497","url":"https://osv.dev/vulnerability/GHSA-qhch-g8qr-p497"}],"summary":"OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability"}