CVE-2013-4354 The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glance(Debian:12) | All versions | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u1 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u2 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u3 | No fix listed |
| debian/glance(Debian:12) | = 2:25.1.0-2+deb12u5 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:26.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:27.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:27.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:27.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-3 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-3+deb12u1 | No fix listed |
| debian/glance(Debian:12) | = 2:28.0.1-4 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:29.0.0~rc1-1 | No fix listed |
Show 87 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glance(Debian:12) | = 2:29.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:30.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:31.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc1-4 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc2-1 | No fix listed |
| debian/glance(Debian:12) | = 2:32.0.0~rc2-2 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-1 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-2 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-3 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-4 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-5 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0-6 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:12) | = 2:33.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:13) | All versions | No fix listed |
| debian/glance(Debian:13) | = 2:30.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:30.0.0-3+deb13u1 | No fix listed |
| debian/glance(Debian:13) | = 2:30.0.0-3+deb13u2 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-1 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-2 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0-4 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:13) | = 2:31.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-1 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-2 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0-4 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc1-4 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc2-1 | No fix listed |
| debian/glance(Debian:13) | = 2:32.0.0~rc2-2 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-1 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-2 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-3 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-4 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-5 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0-6 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:13) | = 2:33.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:14) | All versions | No fix listed |
| debian/glance(Debian:14) | = 2:30.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-1 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-2 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0-4 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:14) | = 2:31.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-1 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-2 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0-4 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-3 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc1-4 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc2-1 | No fix listed |
| debian/glance(Debian:14) | = 2:32.0.0~rc2-2 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-1 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-2 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-3 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-4 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-5 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0-6 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0~rc1-1 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0~rc1-2 | No fix listed |
| debian/glance(Debian:14) | = 2:33.0.0~rc1-3 | No fix listed |
| OpenStack image registry and delivery service glance | All versions | No fix listed |