CVE-2022-4134

2023-03-0623:15:11

CWE-829

[email protected]

web.nvd.nist.gov

openstack-glance

integrity compromise

vm security

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

3.4

Confidence

High

EPSS

0.001

Percentile

23.9%

JSON

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

Affected configurations

Nvd

Node

openstackglance

redhatopenstackMatch13

redhatopenstackMatch16.1

redhatopenstackMatch16.2-

redhatopenstackMatch17

VendorProductVersionCPE
openstackglance*cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*
redhatopenstack13cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*
redhatopenstack16.1cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*
redhatopenstack16.2cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:*
redhatopenstack17cpe:2.3:a:redhat:openstack:17:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openstack	glance	*	cpe:2.3:a:openstack:glance::::::::
redhat	openstack	13	cpe:2.3:a:redhat:openstack:13:::::::*
redhat	openstack	16.1	cpe:2.3:a:redhat:openstack:16.1:::::::*
redhat	openstack	16.2	cpe:2.3:a:redhat:openstack:16.2:-::::::
redhat	openstack	17	cpe:2.3:a:redhat:openstack:17:::::::*