The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glance | Jul 30, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade openstack-swift-testUpgrade python-cinderclientUpgrade openstack-cinderUpgrade python-cinderclient-testUpgrade openstack-nova-networkUpgrade python-quantumUpgrade openstack-quickstartUpgrade openstack-quantum-docUpgrade openstack-swiftUpgrade python-horizonUpgrade openstack-glanceUpgrade openstack-nova-objectstoreUpgrade openstack-quantumUpgrade python-keystoneclientUpgrade openstack-cinder-schedulerUpgrade openstack-swift-docUpgrade python-swiftUpgrade openstack-nova-apiUpgrade openstack-glance-docUpgrade openstack-cinder-volumeUpgrade python-novaUpgrade python-cinderclient-docUpgrade python-glanceUpgrade openstack-keystone-docUpgrade openstack-cinder-docUpgrade openstack-swift-proxyUpgrade openstack-novaUpgrade openstack-cinder-testUpgrade openstack-nova-docUpgrade openstack-dashboardUpgrade openstack-keystone-testUpgrade openstack-swift-containerUpgrade python-django_openstack_authUpgrade python-keystoneclient-testUpgrade openstack-nova-volumeUpgrade openstack-nova-testUpgrade openstack-swift-objectUpgrade python-cinderUpgrade openstack-cinder-apiUpgrade openstack-nova-certUpgrade openstack-nova-vncproxyUpgrade openstack-dashboard-testUpgrade openstack-nova-computeUpgrade openstack-quantum-testUpgrade python-keystoneUpgrade python-keystoneclient-docUpgrade openstack-glance-testUpgrade openstack-keystoneUpgrade openstack-nova-schedulerUpgrade openstack-nova-novncproxyUpgrade openstack-swift-account | Dec 12, 2013 | Mar 22, 2013 |
| Ubuntu | — | Upgrade python-glance | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub