Skip to main content

Glance CVE-2024-32498

MEDIUM
Files or Directories Accessible to External Parties (CWE-552)
2024-07-05 cve@mitre.org
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 05, 2024 - 02:15 nvd
MEDIUM 6.5

DescriptionNVD

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.

AnalysisAI

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-552. An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected products include: Openstack Cinder, Openstack Glance, Openstack Nova. Version information: through 24.0.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Glance

View all
CVE-2022-31546 CRITICAL POC
9.3 Jul 11

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file fun

CVE-2015-5162 HIGH POC
7.5 Oct 07

The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.

CVE-2018-3715 MEDIUM POC
6.5 Jun 07

glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to

CVE-2018-3748 MEDIUM POC
6.1 Jul 03

There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5. Rated medium severity (CVSS 6.1), this

CVE-2022-24696 HIGH
7.8 Mar 13

Mirametrix Glance before 5.1.1.42207 (released on 2018-08-30) allows a local attacker to elevate privileges. Rated high

CVE-2013-4428 LOW POC
3.5 Oct 27

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when t

CVE-2017-7200 MEDIUM
5.8 Mar 21

An SSRF issue was discovered in OpenStack Glance before Newton. Rated medium severity (CVSS 5.8), this vulnerability is

CVE-2015-8234 MEDIUM
5.5 Mar 29

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification pr

CVE-2026-34881 MEDIUM
5.0 Mar 31

Server-Side Request Forgery in OpenStack Glance image import allows authenticated users to bypass URL validation via HTT

CVE-2015-3289 MEDIUM
4.0 Aug 14

OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption

CVE-2013-1840 LOW
3.5 Mar 22

The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 st

CVE-2015-5163 LOW
3.5 Aug 19

The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allow

Share

CVE-2024-32498 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy