OpenStack Glance arbitrary deletion of non-protected images

Description

References

• nvd.nist.gov/vuln/detail/CVE-2012-4573 · ADVISORY
• openstack/glance commit 6ab0992 · WEB
• openstack/glance commit 90bcdc5 · WEB
• openstack/glance commit efd7e75 · WEB
• bugs.launchpad.net/glance/+bug/1065187 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/79895 · WEB
• openstack/glance · PACKAGE
• pypa/advisory-database · WEB
• lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html · WEB
• lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html · WEB
• osvdb.org/87248 · WEB

glance 的其他漏洞

• CVE-2026-34881中危 5.0OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, …
• CVE-2024-32498中危 6.5An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur vi…
• CVE-2022-4134低危 2.8A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integr…
• CVE-2022-47951中危 5.7An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.…
• CVE-2015-8234中危 5.5The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted …