Published: 11/11/2012 Updated: 29/08/2017

CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8

VMScore: 490

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:P

The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openstack folsom 2012.2
openstack essex 2012.1
openstack image registry and delivery service \\(glance\\) -

Synopsis Low: openstack-glance security update Type/Severity Security Advisory: Low Topic Updated openstack-glance packages that fix multiple bugs and add variousenhancements are now available for Red Hat OpenStack Essex Description The openstack-glance packages allows virtual machine imag ...

Debian Bug report logs - #692641 CVE-2012-4573: Authentication bypass for image deletion Package: glance; Maintainer for glance is Debian OpenStack <team+openstack@trackerdebianorg>; Source for glance is src:glance (PTS, buildd, popcon) Reported by: Thomas Goirand <zigo@debianorg> Date: Thu, 8 Nov 2012 03:45:01 U ...

Glance could be made to delete arbitrary images ...

CWE-264 https://github.com/openstack/glance/commit/90bcdc5a89e350a358cf320a03f5afe99795f6f6 http://www.securityfocus.com/bid/56437 https://github.com/openstack/glance/commit/efd7e75b1f419a52c7103c7840e24af8e5deb29d http://www.openwall.com/lists/oss-security/2012/11/09/5 https://bugs.launchpad.net/glance/+bug/1065187 http://www.openwall.com/lists/oss-security/2012/11/07/6 http://secunia.com/advisories/51234 http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html https://github.com/openstack/glance/commit/6ab0992e5472ae3f9bef0d2ced41030655d9d2bc http://secunia.com/advisories/51174 http://www.ubuntu.com/usn/USN-1626-1 http://www.ubuntu.com/usn/USN-1626-2 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html http://rhn.redhat.com/errata/RHSA-2012-1558.html http://packetstormsecurity.com/files/118733/Red-Hat-Security-Advisory-2012-1558-01.html http://osvdb.org/87248 https://exchange.xforce.ibmcloud.com/vulnerabilities/79895 https://access.redhat.com/errata/RHSA-2012:1558 https://nvd.nist.gov https://usn.ubuntu.com/1626-2/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-4573

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect