CVE-2013-1840

CVE-2013-1840CVE-2013-1840

openstack / glance

Description

A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.

Scoring

CVSS 6.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Last modified2026-10-30
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.