Solution
Please Install the Updated Packages.
Insight
Stuart McLaren discovered that Glance did not properly enforce the 'download_image' policy for cached images. An authenticated user could exploit this to obtain sensitive information in an image protected by this setting.
Affected
glance on Ubuntu 13.04 ,
Ubuntu 12.10
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2013-4428 -
CVSS Base Score: 3.5
AV:N/AC:M/Au:S/C:P/I:N/A:N
Related Vulnerabilities