PT-2014-3508

CVE-2014-0162

Published

2014-04-27

Updated

2026-07-06

Description by

CVSS 2.0

6.0

Medium

MetricsAV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4 OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2

Description The issue allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

Recommendations For OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4, update to version 2013.2.4 or later. For OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2, update to version icehouse-rc2 or later.

Exploitability

Fix

Impacts

Researchers

Paul Mcmillan

Paul-Mcmillan

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2014-0162