Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-4428

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.

  • Published: Oct 27, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-4428
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
openstack / glance 2012.2 2012.2.4.x
openstack / glance 2013.1 2013.1.4
openstack / glance 2013.2-milestone1 2013.2-milestone1.x
openstack / glance 2013.2-milestone2 2013.2-milestone2.x
openstack / glance 2013.2-milestone3 2013.2-milestone3.x
canonical / ubuntu_linux 13.04 13.04.x
canonical / ubuntu_linux 12.10 12.10.x