CVE-2016-4383

8.4 highEPSS 2.7%

High (8.4) in hp helion openstack glance. EPSS 2.7% chance of exploitation in the next 30 days.

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change.

Severity

CVSS 3.0

8.4 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2017-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hp:helion_openstack_glance

References

http://www.securityfocus.com/bid/93106
https://bugs.launchpad.net/glance/+bug/1593799/
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05273584
https://wiki.openstack.org/wiki/OSSN/OSSN-0075
http://www.securityfocus.com/bid/93106

Check your stack JSON