Description (CNA)
The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.openwall.com/lists/oss-security/2013/09/19/3
- https://bugs.launchpad.net/glance/+bug/1226078
- http://www.openwall.com/lists/oss-security/2013/09/19/2
ADP enrichment
No English description supplied.