PT-2018-16139

Name of the Vulnerable Software and Affected Versions glance versions prior to 3.0.4 Description The issue is related to a Path Traversal vulnerability due to the lack of validation of the path passed to the glance node module. This allows a malicious user to read the content of any file with a...

CVE-2018-3715: Improper Limitation of a Pathname to a Restricted Directory

glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to read content of any file with known path...

intuit.glance.net XSS vulnerability

Open Bug Bounty ID: OBB-626183 Description| Value ---|--- Affected Website:| intuit.glance.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-Site Scripting

Overview Versions of glance before 3.0.8 are vulnerable to Stored Cross-Site Scripting XSS. This is only exploitable if the attacker is able to control the name of a file that is served by the glance package. Recommendation Upgrade to version 3.0.8 or later. References - HackerOne Report - GitHub...

Path Traversal

Overview Versions of glance before 3.0.4 are vulnerable to path traversal allowing a remote attacker to read arbitrary files from the server using glance. Recommendation Update to version 3.0.4 or later. References - GitHub Commit 8cfd88e - HackerOne Report - GitHub Advisory...

Cross-site Scripting (XSS)

glance is vulnerable to persistent cross-site scripting XSS attacks. The vulnerability exists as glance does not sanitize the file names that are served by the static server, allowing malicious file names to be served and executed as code...

Path Traversal

glance is vulnerable to path traversal attacks. Using a string including ../, attackers can traverse the server and any file with a known path...

Node.js third-party modules: [glance] Stored XSS via file name allows to run arbitrary JavaScript when directory listing is displayed in browser

Hi Guys, There is a Stored XSS vulnerability in glance module. File name, which contains malicious HTML eg. embedded iframe element or javascript: pseudoprotocol handler in element allows to execute JavaScript code against any user who opens directory listing contains such crafted file name. Modu...

Node.js third-party modules: [glance] Path Traversal in glance static file server allows to read content of arbitrary file

Hi Guys, There is Path Traversal vulnerability in glance module. This issue allows to read arbitrary files from the server, where glance is installed. Module glance a quick disposable http server for static files https://www.npmjs.com/package/glance Stats 33 downloads in the last day 34 downloads...

paraview-glance (>=1.0.0, <=1.1.13), paraviewweb (>=1.9.0, <=2.5.29) +3 more potentially affected by CVE-2017-1000006 via plotly.js (>=1.12.0, <=1.14.0)

plotly.js NPM version =1.12.0, =1.0.0, =1.9.0, =1.0.0, =1.0.0, =1.0.6 - vue-admin 0.0.1 Source cves: CVE-2017-1000006 Source advisory: OSV:GHSA-2FQV-H3R5-M4VF...

Ubuntu 14.04 LTS : OpenStack Glance vulnerabilities (USN-3446-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3446-1 advisory. Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change th...

Ubuntu: Security Advisory (USN-3446-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3446-1: OpenStack Glance vulnerabilities

Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change the status of images, contrary to access restrictions. CVE-2015-5251 Mike Fedosin and Alexei Galkin discovered that OpenStack Glance incorrectly...

USN-3446-1 glance vulnerabilities

Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change the status of images, contrary to access restrictions. CVE-2015-5251 Mike Fedosin and Alexei Galkin discovered that OpenStack Glance incorrectly...

SUSE-SU-2017:2628-1 Security update for openstack-glance

This update for openstack-glance fixes the following issues: - Restrict imagelocation metadata When showmultiplelocations is enabled in Glance, any user can rewrite the metadata information for locations, causing a security breach. bsc1023507...

PT-2017-19390

Name of the Vulnerable Software and Affected Versions openstack-glance affected versions not specified Description The issue allows any user to rewrite metadata information for locations when show multiple locations is enabled in Glance, causing a security breach. Recommendations At the moment,...

CVE-2016-4383

An immutability flaw was discovered in openstack-glance, where the glance-manage DB allows deleted image IDs to be reassigned. The flaw could be exploited to allow remote authenticated users to cause other users to boot into a malicious image without knowing it. Mitigation For this flaw to be...

CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

UBUNTU-CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

Authentication flaw

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...