Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

glance: information disclosure

Package(s):

glance

CVE #(s):

CVE-2013-1840

Created:

March 15, 2013

Updated:

April 5, 2013

Description:

From the Ubuntu advisory:

Stuart McLaren discovered an issue with Glance v1 API requests. An authenticated attacker could exploit this to expose the Glance operator's Swift and/or S3 credentials via the response headers when requesting a cached image.

Alerts:

Ubuntu	USN-1764-1	2013-03-14
Red Hat	RHSA-2013:0707-01	2013-04-04

(Log in to post comments)