CVE-2016-4383: The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause…

high8.4CVSS 3.0

AVNACLPRHUIRSCCHIHAH

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
debian	glance	—	—

CVSS provenance

nvdv3.08.4HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

osv8.4HIGH