Path Traversal

glance is vulnerable to path traversal attacks. Using a string including ../, attackers can traverse the server and any file with a known path...

SUSE-SU-2017:2628-1 Security update for openstack-glance

This update for openstack-glance fixes the following issues: - Restrict imagelocation metadata When showmultiplelocations is enabled in Glance, any user can rewrite the metadata information for locations, causing a security breach. bsc1023507...

HP Operations Agent privilege escalation

Privilege escalation via Glance...