CVE-2012-4573: Medium severity red hat openstack essex vulnerability
Published Nov 11, 2012
·Updated
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
Affected Software
4 affected componentsFixes available
pip/glance<11.0.0a0
11.0.0a0
Openstack Essex=2012.1
Openstack folsom=2012.2
Openstack Image Registry And Delivery Service \(glance\)
Remediation
Event History
Nov 11, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
May 17, 2022
Advisory Published
via GitHub·01:41 AM
Frequently Asked Questions
1
What is the severity of CVE-2012-4573?
CVE-2012-4573 is considered a high-severity vulnerability since it allows authenticated users to delete arbitrary non-protected images.
2
How do I fix CVE-2012-4573?
To fix CVE-2012-4573, upgrade to a version of OpenStack Glance that is greater than 11.0.0a0.
3
Which versions of OpenStack are affected by CVE-2012-4573?
CVE-2012-4573 affects OpenStack Glance versions Grizzly, Folsom (2012.2), and Essex (2012.1).
4
Who can exploit CVE-2012-4573?
CVE-2012-4573 can be exploited by remote authenticated users who have access to the OpenStack Glance v1 API.
5
What type of vulnerability is CVE-2012-4573 categorized as?
CVE-2012-4573 is categorized as an authorization or access control vulnerability.