4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
79.9%
OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4,
2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does
not properly enforce the image_size_cap configuration option, which allows
remote authenticated users to cause a denial of service (disk consumption)
by uploading a large image.