PatchFirst · Latest vulnerabilities
Vulnerabilities published for glance in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
It was discovered that OpenStack Glance was incorrectly validating the IP addresses and the redirect destination URL when downloading or importing images from a remote source. An attacker could possibly use this issue to perform server-side request forgery and obtain sensitive information.
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
Check your installed stack and versions against the current vulnerability feeds.