The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.

- Fix Glance Authentication bypass for image deletion

    - Update to stable/essex 2012.1.2 including...

    - Support zero-size image creation via the v1 API

    - Allow admins to share images regardless of owner

    - Log sensitive store info, rather than exposing over       API

    - Fix the qpid_heartbeat option to avoid connection       timeouts

    - Fix image.upload notification to not send stale       metadata

    - Include chunk_name in swift debug message

    - Fix scrubber exception when microsecs in DB       (PostgreSQL) dates

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix Glance Authentication bypass for image deletion     (CVE-2012-4573)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-1626-1 fixed vulnerabilities in the v1 API of Glance. This update provides the corresponding updates for the v2 API.

Gabe Westmaas discovered that Glance did not always properly enforce access controls when deleting images. An authenticated user could delete arbitrary images by using the v1 API under certain circumstances.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Gabe Westmaas discovered that Glance did not always properly enforce access controls when deleting images. An authenticated user could delete arbitrary images by using the v1 API under certain circumstances.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
62978	Fedora 17 : openstack-glance-2012.1.2-2.fc17 (2012-18085)	Nessus	Fedora Local Security Checks	medium
62914	Fedora 18 : openstack-glance-2012.2-3.fc18 (2012-17901)	Nessus	Fedora Local Security Checks	medium
62888	Ubuntu 12.10 : glance vulnerability (USN-1626-2)	Nessus	Ubuntu Local Security Checks	medium
62868	Ubuntu 12.04 LTS / 12.10 : glance vulnerability (USN-1626-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2012-4573

medium

Tenable Plugins

medium

medium

medium

medium