CVE-2013-1840

Publication date 14 March 2013

Last updated 4 November 2026

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

6.5 · Medium

Score breakdown

Description

A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.

Status

Package Ubuntu Release Status
glance 12.10 quantal
Fixed in 2012.2.1-0ubuntu1.2
12.04 LTS precise
Fixed in 2012.1.3+stable~20120821-120fcf-0ubuntu1.5
11.10 oneiric
Not affected
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

Severity score breakdown

CVSS version: CVSS v3.0

Base score 6.5 · Medium

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Related Ubuntu Security Notices (USN)

    • USN-1764-1
    • OpenStack Glance vulnerability
    • 14 March 2013

Other references

Access our resources on patching vulnerabilities