CVE-2015-1856: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 4% chance of exploitation in the next 30 days.

OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.04 only
• Openstack Swift: up to and including 2.2.2

Published 2015-04-17. Last modified 2026-06-17.