CVE-2013-4354

Description

The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-4238

https://bugs.launchpad.net/glance/+bug/1226078

http://www.openwall.com/lists/oss-security/2013/09/19/3

http://www.openwall.com/lists/oss-security/2013/09/19/2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS