CVE-2012-4573
openstack: no CVSS score yet. EPSS 3.3% chance of exploitation in the next 30 days. Fixed in glance 11.0.0a0.
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- EPSS
- 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:essex
- openstack:folsom
- openstack:image_registry_and_delivery_service_\(glance\)
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6rrm-xxvh-7r87 | PyPI | glance | <11.0.0a0 | 11.0.0a0 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html
- http://osvdb.org/87248
- http://packetstormsecurity.com/files/118733/Red-Hat-Security-Advisory-2012-1558-01.html
- http://rhn.redhat.com/errata/RHSA-2012-1558.html