A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
References
| Link | Resource |
|---|---|
| https://bugs.launchpad.net/glance/+bug/1990157 | Issue Tracking |
| https://bugzilla.redhat.com/show_bug.cgi?id=2147462 | Issue Tracking |
| https://wiki.openstack.org/wiki/OSSN/OSSN-0090 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Mar 2023, 17:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:* cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:17:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:* |
|
| First Time |
Redhat openstack
Openstack glance Redhat Openstack |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 2.8 |
| CWE | CWE-829 | |
| References | (MISC) https://bugs.launchpad.net/glance/+bug/1990157 - Issue Tracking | |
| References | (MISC) https://wiki.openstack.org/wiki/OSSN/OSSN-0090 - Vendor Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2147462 - Issue Tracking |
06 Mar 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-06 23:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-4134
Mitre link : CVE-2022-4134
CVE.ORG link : CVE-2022-4134
JSON object : View
Products Affected
redhat
- openstack
openstack
- glance
CWE
CWE-829
Inclusion of Functionality from Untrusted Control Sphere