CVE-2012-5482

Fixed in a distro release EPSS 3%

The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573.

Published 2012-11-11 · CVE record · OSV

Products: openstack essex, openstack folsom, openstack image_registry_and_delivery_service_(glance)

Fixed upstream

Distro releases