cbcvebase.
CVE-2013-4354
published 2013-11-23

CVE-2013-4354: The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding…

low2.1CVSS 3.1
AVLACLAuNCNIPAN
The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.

Affected

1 ranges
VendorProductVersion rangeFixed in
debianglance

CVSS provenance

nvd2.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
osv2.1LOW