Lucene search

GitHub Advisory DatabaseGHSA-5GP5-VXJ6-4257

HistoryMar 07, 2023 - 12:30 a.m.

OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability

2023-03-0700:30:24

CWE-829

GitHub Advisory Database

github.com

openstack

glance

vulnerability

images

integrity

virtual machines

software

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

23.9%

JSON

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

Affected configurations

Vulners

Node

glance_projectglanceRange≤25.1.0

VendorProductVersionCPE
glance_projectglance*cpe:2.3:a:glance_project:glance:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
glance_project	glance	*	cpe:2.3:a:glance_project:glance::::::::

References

bugs.launchpad.net/glance/+bug/1990157

bugzilla.redhat.com/show_bug.cgi?id=2147462

github.com/advisories/GHSA-5gp5-vxj6-4257

nvd.nist.gov/vuln/detail/CVE-2016-0757

nvd.nist.gov/vuln/detail/CVE-2022-4134

wiki.openstack.org/wiki/OSSN/OSSN-0090

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

23.9%

JSON

Related for GHSA-5GP5-VXJ6-4257