CVE-2012-4573

2012-11-1113:00:58

CWE-264

[email protected]

web.nvd.nist.gov

cve-2012-4573

openstack

glance

grizzly

folsom

essex

image deletion

remote

authentication

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

JSON

The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.

Affected configurations

NVD

Node

openstackessexMatch2012.1

openstackfolsomMatch2012.2

openstackimage_registry_and_delivery_service_\(glance\)Match-

CPENameOperatorVersion
openstack:essexopenstack essexeq2012.1
openstack:folsomopenstack folsomeq2012.2
openstack:image_registry_and_delivery_service_\(glance\)openstack image registry and delivery service (glance)eq-

CPE	Name	Operator	Version
openstack:essex	openstack essex	eq	2012.1
openstack:folsom	openstack folsom	eq	2012.2
openstack:image_registry_and_delivery_service_\(glance\)	openstack image registry and delivery service (glance)	eq	-