Pip Glance vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Pip Glance: 1 record(s), with affected versions and fixes.
CVE-2013-1840
Medium · 6.5
CWE-201 Mar 22, 2013
Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request
A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.