CVE-2013-1840
Medium 6.5
Description
A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.
Metrics
- CVSS 3.1
-
6.5 (MEDIUM)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 2% (percentile: 77) as of 1 November 2026
- CWE
- CWE-201, CWE-200
Affected products
openstack: glance; openstack: essex; openstack: folsom; amazon: s3 store; openstack: swift
References
- http://secunia.com/advisories/52565 Vendor Advisory
- http://secunia.com/advisories/52565 Vendor Advisory
- http://osvdb.org/91304
- http://rhn.redhat.com/errata/RHSA-2013-0707.html
- http://www.openwall.com/lists/oss-security/2013/03/14/15
- http://www.securityfocus.com/bid/58490
- http://www.ubuntu.com/usn/USN-1764-1
- https://access.redhat.com/errata/RHSA-2013:0707
- https://access.redhat.com/security/cve/CVE-2013-1840
- https://bugs.launchpad.net/glance/+bug/1135541