PT-2013-5012
CVE-2013-4428
·
تاريخ النشر
2013-10-27
·
تاريخ التحديث
2018-11-15
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OpenStack Image Registry and Delivery Service (Glance) versions Folsom through Grizzly before 2013.1.4
OpenStack Image Registry and Delivery Service (Glance) version Havana before 2013.2
Description
The issue allows remote authenticated users to read otherwise restricted images via an image UUID, due to improper access restriction to cached images when the download image policy is configured.
Recommendations
For OpenStack Image Registry and Delivery Service (Glance) versions Folsom through Grizzly before 2013.1.4, update to version 2013.1.4 or later.
For OpenStack Image Registry and Delivery Service (Glance) version Havana before 2013.2, update to version 2013.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾