CVE-2014-0162

Published: Apr 27, 2014Modified: May 6, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

Affected (5)

Products: Openstack: Icehouse, Image Registry And Delivery Service (glance)

Openstack

2 products

Icehouse

Image Registry And Delivery Service (glance)

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Openstack Icehouse	Version rc-1
Openstack Image Registry And Delivery Service (glance)	Version 2013.2.1
Openstack Image Registry And Delivery Service (glance)	Version 2013.2.2
Openstack Image Registry And Delivery Service (glance)	Version 2013.2.3
Openstack Image Registry And Delivery Service (glance)	Version 2013.2