medium6.5
CVE-2013-1840
A flaw was found in OpenStack Glance.
Impact
A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Glance | Version v1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/91304
- http://rhn.redhat.com/errata/RHSA-2013-0707.html
- http://secunia.com/advisories/52565
- http://www.openwall.com/lists/oss-security/2013/03/14/15
- http://www.securityfocus.com/bid/58490
- http://www.ubuntu.com/usn/USN-1764-1
- https://access.redhat.com/errata/RHSA-2013:0707
- https://access.redhat.com/security/cve/CVE-2013-1840
- https://bugs.launchpad.net/glance/+bug/1135541
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82878
- https://review.openstack.org/#/c/24437/
- https://review.openstack.org/#/c/24438/
- https://review.openstack.org/#/c/24439/