Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.1
CVSSv2

CVE-2013-4354

Published: 23/11/2013 Updated: 25/11/2013
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Subscribe to Openstack

Vulnerability Summary

The API prior to 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.

Vulnerable Product Search on Vulmon Subscribe to Product

openstack image registry and delivery service \\(glance\\) -

Vendor Advisories

Red Hat: CVE-2013-4354
The API before 21 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image ...

References

CWE-20https://bugs.launchpad.net/glance/+bug/1226078http://www.openwall.com/lists/oss-security/2013/09/19/2http://www.openwall.com/lists/oss-security/2013/09/19/3https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2013-4354
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-34377CVE-2024-20859CVE-2023-49606injectarbitrary CVE-2024-33788CVE-2024-30973IDORCVE-2024-33907
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook