OpenStack Glance vulnerability

2013-03-1400:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04

Packages

glance - OpenStack Image Registry and Delivery Service

Details

Stuart McLaren discovered an issue with Glance v1 API requests. An
authenticated attacker could exploit this to expose the Glance operator’s
Swift and/or S3 credentials via the response headers when requesting a
cached image.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchpython-glance< 2012.2.1-0ubuntu1.2UNKNOWN
Ubuntu12.10noarchglance< 2012.2.1-0ubuntu1.2UNKNOWN
Ubuntu12.10noarchglance-api< 2012.2.1-0ubuntu1.2UNKNOWN
Ubuntu12.10noarchglance-client< 2012.2.1-0ubuntu1.2UNKNOWN
Ubuntu12.10noarchglance-common< 2012.2.1-0ubuntu1.2UNKNOWN
Ubuntu12.10noarchglance-registry< 2012.2.1-0ubuntu1.2UNKNOWN
Ubuntu12.10noarchpython-glance-doc< 2012.2.1-0ubuntu1.2UNKNOWN
Ubuntu12.04noarchpython-glance< 2012.1.3+stable~20120821-120fcf-0ubuntu1.5UNKNOWN
Ubuntu12.04noarchglance< 2012.1.3+stable~20120821-120fcf-0ubuntu1.5UNKNOWN
Ubuntu12.04noarchglance-api< 2012.1.3+stable~20120821-120fcf-0ubuntu1.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.10	noarch	python-glance	< 2012.2.1-0ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	glance	< 2012.2.1-0ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	glance-api	< 2012.2.1-0ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	glance-client	< 2012.2.1-0ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	glance-common	< 2012.2.1-0ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	glance-registry	< 2012.2.1-0ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	python-glance-doc	< 2012.2.1-0ubuntu1.2	UNKNOWN
Ubuntu	12.04	noarch	python-glance	< 2012.1.3+stable~20120821-120fcf-0ubuntu1.5	UNKNOWN
Ubuntu	12.04	noarch	glance	< 2012.1.3+stable~20120821-120fcf-0ubuntu1.5	UNKNOWN
Ubuntu	12.04	noarch	glance-api	< 2012.1.3+stable~20120821-120fcf-0ubuntu1.5	UNKNOWN