Unrated severityNVD Advisory· Published Nov 23, 2013· Updated Jun 16, 2026

CVE-2013-4354

Description

The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenStack/Image Registry And Delivery Service \(glance\)
cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):-:*:*:*:*:*:*:*
OpenStack/Glancellm-fuzzy
Range: <2.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2013/09/19/2nvd
www.openwall.com/lists/oss-security/2013/09/19/3nvd
bugs.launchpad.net/glance/+bug/1226078nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000