CVE-2012-5482
CVE-2012-5482
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573.
EPSS 2.7% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
glance Debian:12
- Affected ranges
- ECOSYSTEM: < 2012.1.1-3
Update to 2012.1.1-3
glance Debian:13
- Affected ranges
- ECOSYSTEM: < 2012.1.1-3
Update to 2012.1.1-3
glance Debian:14
- Affected ranges
- ECOSYSTEM: < 2012.1.1-3
Update to 2012.1.1-3
glance PyPI
- Affected ranges
- ECOSYSTEM: < 11.0.0a0
Update to 11.0.0a0
Original sources
- http://secunia.com/advisories/51174
- https://github.com/openstack/glance/commit/b591304b8980d8aca8fa6cda9ea1621aca000c88
- http://www.openwall.com/lists/oss-security/2012/11/08/2
- https://bugs.launchpad.net/glance/+bug/1076506
- http://www.securityfocus.com/bid/56437
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80019
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html
- http://www.openwall.com/lists/oss-security/2012/11/07/6
- http://www.openwall.com/lists/oss-security/2012/11/09/5
- http://osvdb.org/87248
- https://github.com/openstack/glance/commit/fc0ee7623ec59c87ac6fc671e95a9798d6f2e2c3
- http://www.openwall.com/lists/oss-security/2012/11/09/1
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-5482