CVE-2013-4428

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.

CVSS v2.0 3.5 LOW

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://rhn.redhat.com/errata/RHSA-2013-1525.html	Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/10/15/8	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/10/16/9	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/63159	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2003-1	Third Party Advisory
https://bugs.launchpad.net/glance/+bug/1235226	Exploit Third Party Advisory
https://bugs.launchpad.net/glance/+bug/1235378	Exploit Third Party Advisory
https://launchpad.net/glance/+milestone/2013.1.4	Patch Third Party Advisory
https://launchpad.net/glance/+milestone/2013.2	Patch Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:openstack:glance::::::::
	cpe:2.3:a:openstack:glance::::::::
	cpe:2.3:a:openstack:glance:2013.2:milestone1::::::
	cpe:2.3:a:openstack:glance:2013.2:milestone2::::::
	cpe:2.3:a:openstack:glance:2013.2:milestone3::::::

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::*

History

No history.

Information

Published : 2013-10-27 00:55

Updated : 2018-11-15 19:34

NVD link : CVE-2013-4428

Mitre link : CVE-2013-4428

CVE.ORG link : CVE-2013-4428

JSON object : View

Products Affected

openstack

glance

canonical

ubuntu_linux

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2013-4428", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-10-27T00:55:03.963", "references": [{"url": "http://rhn.redhat.com/errata/RHSA-2013-1525.html", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2013/10/15/8", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2013/10/16/9", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/63159", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-2003-1", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugs.launchpad.net/glance/+bug/1235226", "tags": ["Exploit", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugs.launchpad.net/glance/+bug/1235378", "tags": ["Exploit", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://launchpad.net/glance/+milestone/2013.1.4", "tags": ["Patch", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://launchpad.net/glance/+milestone/2013.2", "tags": ["Patch", "Third Party Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID."}, {"lang": "es", "value": "OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly con versiones anteriores a 2013.1.4, y Havana con versiones anteriores a 2013.2, cuando se configura la pol\u00edtica image_download, no restringe adecuadamente el acceso a las im\u00e1genes almacenadas en cach\u00e9, lo que permite a usuarios remotos autenticados leer de otra manera im\u00e1genes restringidas a trav\u00e9s de un imagen UUID."}], "lastModified": "2018-11-15T19:34:00.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15426AFE-88FB-4A04-8F20-259F325827A0", "versionEndIncluding": "2012.2.4", "versionStartIncluding": "2012.2"}, {"criteria": "cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFFED5E7-70D2-4912-B343-4A6CD080CC48", "versionEndExcluding": "2013.1.4", "versionStartIncluding": "2013.1"}, {"criteria": "cpe:2.3:a:openstack:glance:2013.2:milestone1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9666E262-4AD2-4278-BFE7-3885D560712B"}, {"criteria": "cpe:2.3:a:openstack:glance:2013.2:milestone2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C653FE7-BED8-4C96-8F4C-FA574DF6EFC5"}, {"criteria": "cpe:2.3:a:openstack:glance:2013.2:milestone3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4778628-C032-4B4E-9A9F-6A3B0351D14E"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFAA48D9-BEB4-4E49-AD50-325C262D46D9"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}