Lucene search
HistoryApr 27, 2014 - 8:55 p.m.
CVE-2014-0162
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.003
Percentile
70.9%
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.
Affected configurations
Node
openstackicehouseMatchrc-1
ORopenstackimage_registry_and_delivery_service_\(glance\)Match2013.2
ORopenstackimage_registry_and_delivery_service_\(glance\)Match2013.2.1
ORopenstackimage_registry_and_delivery_service_\(glance\)Match2013.2.2
ORopenstackimage_registry_and_delivery_service_\(glance\)Match2013.2.3
Related
github
github
cvelist
cvelist
CVE-2014-0162
2014-04-27 20:00:00
prion
prion
Authentication flaw
2014-04-27 20:55:00
nessus
nessus
Ubuntu 13.10 : glance vulnerability (USN-2193-1)
2014-05-06 00:00:00
Fedora 20 : openstack-glance-2013.2.3-3.fc20 (2014-5198)
2014-05-13 00:00:00
Fedora 20 : openstack-glance-2013.2.4-1.fc20 (2014-11697)
2014-10-20 00:00:00
ubuntucve
ubuntucve
CVE-2014-0162
2014-04-27 00:00:00
redhat
redhat
(RHSA-2014:0455) Important: openstack-glance security update
2014-04-30 00:00:00
debiancve
debiancve
CVE-2014-0162
2014-04-27 20:55:23
securityvulns
securityvulns
[USN-2193-1] OpenStack Glance vulnerability
2014-05-07 00:00:00
OpenStack multiple security vulnerabilities
2014-05-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2193-1)
2014-05-12 00:00:00
Ubuntu Update for glance USN-2193-1
2014-05-12 00:00:00
Fedora Update for openstack-glance FEDORA-2014-11697
2014-10-19 00:00:00
cve
cve
CVE-2014-0162
2014-04-27 20:55:23
ubuntu
ubuntu
OpenStack Glance vulnerability
2014-05-05 00:00:00
osv
osv
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:01:49
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-glance-2013.2.4-1.fc20
2014-10-18 16:59:05
[SECURITY] Fedora 20 Update: openstack-glance-2013.2.3-3.fc20
2014-05-13 05:03:44
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.003
Percentile
70.9%
Related for NVD:CVE-2014-0162