Orta CVSS 6.5
CVE-2013-1840: Glance: güvenlik açığı
Açıklama (NVD)
A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.
Özet bilgiler
- Ürün
- Openstack Glance
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- %1,70 (yüzdelik 77)
- CWE
- CWE-201
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| openstack-glance | v1 | v1 | — |
Kaynaklar
- NVD kaydı
- osvdb.org
- rhn.redhat.com
- secunia.com
- www.openwall.com
- www.securityfocus.com
- www.ubuntu.com
- access.redhat.com
- access.redhat.com
- bugs.launchpad.net
- exchange.xforce.ibmcloud.com
- review.openstack.org
- review.openstack.org
- review.openstack.org
- osvdb.org
- rhn.redhat.com
- secunia.com
- www.openwall.com
- www.securityfocus.com
- www.ubuntu.com
- bugs.launchpad.net
- exchange.xforce.ibmcloud.com
- review.openstack.org
- review.openstack.org
- review.openstack.org
- CWE-201