CVE-2012-4573
Fixed in a distro release EPSS 3%
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
Products: openstack essex, openstack folsom, openstack image_registry_and_delivery_service_(glance)
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | glance | 11.0.0a0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glance | 2012.1.1-2 |
| Debian 13 | glance | 2012.1.1-2 |
| Red Hat openstack 1 | openstack-glance | 0:2012.1.2-2.el6 |
| Red Hat openstack 1 | openstack-glance-doc | 0:2012.1.2-2.el6 |
| Red Hat openstack 1 | python-glance | 0:2012.1.2-2.el6 |