NVD

Id
39973  
Name
CVE-2013-4354  
Description
The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-11-23  
Modified Date
2013-11-25  
Seq
2013-4354  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203402 39973 CVE-2013-4354 [oss-security] 20130919 OpenStack: Glance image creation in other tenant accounts (CVE-2013-4354)  View
203403 39973 CVE-2013-4354 [oss-security] 20130919 Re: OpenStack: Glance image creation in other tenant accounts (CVE-2013-4354)  View
203404 39973 CVE-2013-4354 https://bugs.launchpad.net/glance/+bug/1226078  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23653 JVNDB-2013-005228 OpenStack Image Registry and Delivery Service の API における任意のテナントに画像を挿入される脆弱性 OpenStack Image Registry and Delivery Service (Glance) の API には、任意のテナントに画像を挿入される脆弱性が存在します。 CVE-2013-4354 64296 CVE-2013-4354 39973 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005228.html 2013-09-26 2013-11-26 View