{"action":"Upgrade cinder to 7.0.0a0 or later.","affected":[{"fixed":"7.0.0a0","introduced":"0"}],"component":"cinder","cve_ids":["CVE-2013-4183"],"ecosystem":"PyPI","epss":0.00406,"exploited":false,"fixed_versions":["7.0.0a0"],"ghsa_id":"GHSA-q3rw-wcj6-8cjf","id":"tcs_01M5KG5W7A19KP4TE87XYJ3TQW","modified_at":"2024-11-25T22:42:02.600942Z","published_at":"2013-09-16T19:14:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-35","http://rhn.redhat.com/errata/RHSA-2013-1198.html","https://bugs.launchpad.net/cinder/+bug/1198185","http://www.ubuntu.com/usn/USN-2005-1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-35","url":"https://osv.dev/vulnerability/PYSEC-2013-35"}],"summary":"The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive in"}