PT-2014-3508

CVE-2014-0162

Publicado

2014-04-27

Atualizado

2026-07-06

Descrição por

CVSS 2.0

6.0

Média

MétricasAV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4 OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2

Description The issue allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

Recommendations For OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4, update to version 2013.2.4 or later. For OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2, update to version icehouse-rc2 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Paul Mcmillan

Paul-Mcmillan

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-20: Improper Input Validation

Identificadores relacionados

CVE-2014-0162