CVE-2012-4573
CVE-2012-4573
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
EPSS 3.3% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
glance Debian:12
- Affected ranges
- ECOSYSTEM: < 2012.1.1-2
Update to 2012.1.1-2
glance Debian:13
- Affected ranges
- ECOSYSTEM: < 2012.1.1-2
Update to 2012.1.1-2
glance Debian:14
- Affected ranges
- ECOSYSTEM: < 2012.1.1-2
Update to 2012.1.1-2
glance PyPI
- Affected ranges
- ECOSYSTEM: < 11.0.0a0
Update to 11.0.0a0
Original sources
- http://secunia.com/advisories/51174
- http://secunia.com/advisories/51234
- http://www.ubuntu.com/usn/USN-1626-1
- http://rhn.redhat.com/errata/RHSA-2012-1558.html
- http://www.securityfocus.com/bid/56437
- https://github.com/openstack/glance/commit/90bcdc5a89e350a358cf320a03f5afe99795f6f6
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html
- http://www.openwall.com/lists/oss-security/2012/11/07/6
- http://www.openwall.com/lists/oss-security/2012/11/09/5
- http://packetstormsecurity.com/files/118733/Red-Hat-Security-Advisory-2012-1558-01.html
- http://osvdb.org/87248
- https://github.com/openstack/glance/commit/6ab0992e5472ae3f9bef0d2ced41030655d9d2bc
- http://www.ubuntu.com/usn/USN-1626-2
- https://bugs.launchpad.net/glance/+bug/1065187
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html
- https://github.com/openstack/glance/commit/efd7e75b1f419a52c7103c7840e24af8e5deb29d
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79895
- https://nvd.nist.gov/vuln/detail/CVE-2012-4573