Lucene search

K
redhatRedHatRHSA-2024:2732
HistoryMay 22, 2024 - 8:29 p.m.

(RHSA-2024:2732) Moderate: Red Hat OpenStack Platform 17.1 (python-glance-store) security update

2024-05-2220:29:44
access.redhat.com
6
openstack image service
glance store
security update
cve-2024-1141
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.5%

OpenStack image service store library

Security Fix(es):

  • Glance Store access key logged in DEBUG log level (CVE-2024-1141)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9noarchpython3-glance-store< 2.5.1-17.1.20230621023901.el9ostpython3-glance-store-2.5.1-17.1.20230621023901.el9ost.noarch.rpm

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.5%