NVD

Id
40035  
Name
CVE-2013-4428  
Description
OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-10-26  
Modified Date
2013-12-19  
Seq
2013-4428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203682 40035 CVE-2013-4428 RHSA-2013:1525  View
203683 40035 CVE-2013-4428 [oss-security] 20131015 CVE request for a vulnerability in OpenStack Glance  View
203684 40035 CVE-2013-4428 [oss-security] 20131015 Re: CVE request for a vulnerability in OpenStack Glance  View
203685 40035 CVE-2013-4428 63159  View
203686 40035 CVE-2013-4428 USN-2003-1  View
203687 40035 CVE-2013-4428 https://bugs.launchpad.net/glance/+bug/1235226  View
203688 40035 CVE-2013-4428 https://bugs.launchpad.net/glance/+bug/1235378  View
203689 40035 CVE-2013-4428 https://launchpad.net/glance/+milestone/2013.1.4  View
203690 40035 CVE-2013-4428 https://launchpad.net/glance/+milestone/2013.2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23753 JVNDB-2013-005328 複数の OpenStack 製品における制限イメージを読まれる脆弱性 OpenStack Image Registry and Delivery Service (Glance) の Folsom、Grizzly、および Havana は、image_download ポリシーが設定されている場合、キャッシュされたイメージへのアクセスを適切に制限しないため、他の制限イメージを読まれる脆弱性が存在します。 CVE-2013-4428 64370 CVE-2013-4428 40035 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005328.html 2013-10-17 2014-01-17 View