Glance vulnerability

2013-10-2300:00:00

ubuntu.com

5.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10

Packages

glance - OpenStack Image Registry and Delivery Service

Details

Stuart McLaren discovered that Glance did not properly enforce the
‘download_image’ policy for cached images. An authenticated user could
exploit this to obtain sensitive information in an image protected by this
setting.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchpython-glance< 1:2013.1.3-0ubuntu1.1UNKNOWN
Ubuntu13.04noarchglance< 1:2013.1.3-0ubuntu1.1UNKNOWN
Ubuntu13.04noarchglance-api< 1:2013.1.3-0ubuntu1.1UNKNOWN
Ubuntu13.04noarchglance-common< 1:2013.1.3-0ubuntu1.1UNKNOWN
Ubuntu13.04noarchglance-registry< 1:2013.1.3-0ubuntu1.1UNKNOWN
Ubuntu13.04noarchpython-glance-doc< 1:2013.1.3-0ubuntu1.1UNKNOWN
Ubuntu12.10noarchpython-glance< 2012.2.4-0ubuntu1.1UNKNOWN
Ubuntu12.10noarchglance< 2012.2.4-0ubuntu1.1UNKNOWN
Ubuntu12.10noarchglance-api< 2012.2.4-0ubuntu1.1UNKNOWN
Ubuntu12.10noarchglance-client< 2012.2.4-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	python-glance	< 1:2013.1.3-0ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	glance	< 1:2013.1.3-0ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	glance-api	< 1:2013.1.3-0ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	glance-common	< 1:2013.1.3-0ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	glance-registry	< 1:2013.1.3-0ubuntu1.1	UNKNOWN
Ubuntu	13.04	noarch	python-glance-doc	< 1:2013.1.3-0ubuntu1.1	UNKNOWN
Ubuntu	12.10	noarch	python-glance	< 2012.2.4-0ubuntu1.1	UNKNOWN
Ubuntu	12.10	noarch	glance	< 2012.2.4-0ubuntu1.1	UNKNOWN
Ubuntu	12.10	noarch	glance-api	< 2012.2.4-0ubuntu1.1	UNKNOWN
Ubuntu	12.10	noarch	glance-client	< 2012.2.4-0ubuntu1.1	UNKNOWN