CVE-2022-4134

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.8 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
redhatCNA
---
---
CVEADP
---
---
CISA-ADPADP
2.8 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
openstackglance
*
redhatopenstack
16.1
redhatopenstack
16.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
glance
noble
deferred
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
deferred
focal
deferred
bionic
deferred
xenial
deferred
trusty
ignored
Common Weakness Enumeration
References
https://bugs.launchpad.net/glance/+bug/1990157
https://bugzilla.redhat.com/show_bug.cgi?id=2147462
https://wiki.openstack.org/wiki/OSSN/OSSN-0090
https://bugs.launchpad.net/glance/+bug/1990157
https://bugzilla.redhat.com/show_bug.cgi?id=2147462
https://wiki.openstack.org/wiki/OSSN/OSSN-0090