PT-2013-5012

CVE-2013-4428

·

Publicado

2013-10-27

·

Atualizado

2018-11-15

Descrição por

CVSS 2.0
3.5
Baixa
MétricasAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service (Glance) versions Folsom through Grizzly before 2013.1.4 OpenStack Image Registry and Delivery Service (Glance) version Havana before 2013.2
Description The issue allows remote authenticated users to read otherwise restricted images via an image UUID, due to improper access restriction to cached images when the download image policy is configured.
Recommendations For OpenStack Image Registry and Delivery Service (Glance) versions Folsom through Grizzly before 2013.1.4, update to version 2013.1.4 or later. For OpenStack Image Registry and Delivery Service (Glance) version Havana before 2013.2, update to version 2013.2 or later.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2013-4428
RHSA-2013:1525
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com