Red Hat Security Advisory: openstack-glance security and bug fix update

Fixed packages 3

Vulnerabilities 1

• Medium 6.5
  CVE-2013-1840

  Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request

  A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the …

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 17.1 Debian PyPI
  Mar 22, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=888077
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=915445
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=917059
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=920393
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=923395
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0707.json
• report
  https://access.redhat.com/security/cve/CVE-2013-1840
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-1840
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-1840