CVE-2013-4428: canonical ubuntu_linux
Vulnerability summary
CVE-2013-4428 is a low (CVSS 3.5) vulnerability in canonical ubuntu_linux. EPSS estimates a 3.08% chance of exploitation in the next 30 days, higher than 87.5% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 27-10-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.08%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.08% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (bugs.launchpad.net)
Maturity: unknown
Exploit Reference (bugs.launchpad.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat3 products
- openstack-glance< 0:2013.1.4-1.el6ost
- openstack-glance-doc< 0:2013.1.4-1.el6ost
- python-glance< 0:2013.1.4-1.el6ost
Canonical1 product
- ubuntu_linuxEOL12.10 | 13.04
Debian1 product
- glance< 2013.2-1
Openstack1 product
- glance≥ 2012.2, ≤ 2012.2.4 | ≥ 2013.1, < 2013.1.4 | 2013.2:milestone1 | 2013.2:milestone2 | 2013.2:milestone3
4 vendors · 6 products
