IR
Product
Image Registry And Delivery Service (glance)
15
CVEs
0
On KEV
4.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Image Registry And Delivery Service (glance) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0757 | 4.3 | Apr 13 | OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change… Affected: 11.0.0; 11.0.1; 2015.1.2 |
| CVE-2015-5286 | – | Oct 26 | OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of… Affected: through 2014.2.3; 2015.1.0; 2015.1.1 |
| CVE-2015-5251 | – | Oct 26 | OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access… Affected: through 2014.2.3; 2015.1.0; 2015.1.1 |
| CVE-2015-1881 | – | Feb 24 | OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of… Affected: 2014.2; 2014.2.1; 2014.2.2 |
| CVE-2014-9684 | – | Feb 24 | OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of… Affected: 2014.2; 2014.2.1; 2014.2.2 |
| CVE-2014-9623 | – | Jan 23 | OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by… Affected: through 2014.1.3; 2014.2; 2014.2; 2014.2; 2014.2 |
| CVE-2015-1195 | – | Jan 21 | The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary… Affected: 2014.1 before 2014.1.4; 2014.2 before 2014.2.2 |
| CVE-2014-9493 | – | Jan 7 | The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full… Affected: 2014.1 before 2014.1.4; 2014.2 before 2014.2.2 |
| CVE-2014-5356 | – | Aug 25 | OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the… Affected: through 2013.2.3; 2013.2; 2013.2.1; 2013.2.2; 2014.1; 2014.1.1; +3 more |
| CVE-2014-0162 | – | Apr 27 | The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with… Affected: 2013.2; 2013.2.1; 2013.2.2; 2013.2.3 |
| CVE-2014-1948 | – | Feb 14 | OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when… Affected: 2013.2; 2013.2.1 |
| CVE-2013-4354 | – | Nov 23 | The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a… Affected: All versions, or not specified |
| CVE-2013-0212 | – | Feb 24 | store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password… Affected: 2012.1; 2012.2; 2012.2.1; 2012.2.2 |
| CVE-2012-5482 | – | Nov 11 | The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion… Affected: All versions, or not specified |
| CVE-2012-4573 | – | Nov 11 | The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion… Affected: All versions, or not specified |
Showing 15