CVE-2013-4428

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.

CVSS v2.0 3.5 LOW

3.5^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/63159	Third Party Advisory VDB Entry
https://bugs.launchpad.net/glance/+bug/1235226	Exploit Third Party Advisory
https://bugs.launchpad.net/glance/+bug/1235378	Exploit Third Party Advisory
https://launchpad.net/glance/+milestone/2013.1.4	Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/10/15/8	Mailing List Third Party Advisory
https://launchpad.net/glance/+milestone/2013.2	Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/10/16/9	Mailing List Third Party Advisory
http://www.ubuntu.com/usn/USN-2003-1	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1525.html	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:openstack:glance:2013.2:milestone1::::::
	cpe:2.3:a:openstack:glance:2013.2:milestone2::::::
	cpe:2.3:a:openstack:glance:2013.2:milestone3::::::
	cpe:2.3:a:openstack:glance::::::::
	cpe:2.3:a:openstack:glance::::::::

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*

Information

Published : 2013-10-26 17:55

Updated : 2018-11-15 11:34

NVD link : CVE-2013-4428

Mitre link : CVE-2013-4428

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Products Affected

canonical

ubuntu_linux

openstack

glance

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/63159", "name": "63159", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "https://bugs.launchpad.net/glance/+bug/1235226", "name": "https://bugs.launchpad.net/glance/+bug/1235226", "tags": ["Exploit", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://bugs.launchpad.net/glance/+bug/1235378", "name": "https://bugs.launchpad.net/glance/+bug/1235378", "tags": ["Exploit", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://launchpad.net/glance/+milestone/2013.1.4", "name": "https://launchpad.net/glance/+milestone/2013.1.4", "tags": ["Patch", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2013/10/15/8", "name": "[oss-security] 20131015 CVE request for a vulnerability in OpenStack Glance", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://launchpad.net/glance/+milestone/2013.2", "name": "https://launchpad.net/glance/+milestone/2013.2", "tags": ["Patch", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2013/10/16/9", "name": "[oss-security] 20131015 Re: CVE request for a vulnerability in OpenStack Glance", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "http://www.ubuntu.com/usn/USN-2003-1", "name": "USN-2003-1", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-1525.html", "name": "RHSA-2013:1525", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-4428", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2013-10-27T00:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:openstack:glance:2013.2:milestone1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:openstack:glance:2013.2:milestone2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:openstack:glance:2013.2:milestone3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2012.2.4", "versionStartIncluding": "2012.2"}, {"cpe23Uri": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2013.1.4", "versionStartIncluding": "2013.1"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-11-15T19:34Z"}

3.5 /10