CVE-2013-4428

no score yetEPSS 3.1%

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2013-10-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
openstack:glance

References

http://rhn.redhat.com/errata/RHSA-2013-1525.html
http://www.openwall.com/lists/oss-security/2013/10/15/8
http://www.openwall.com/lists/oss-security/2013/10/16/9
http://www.securityfocus.com/bid/63159
http://www.ubuntu.com/usn/USN-2003-1

Check your stack JSON