{"containers": {"cna": {"title": "Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials."}], "affected": [{"vendor": "Red Hat", "product": "OpenStack Folsom for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openstack-glance", "defaultStatus": "affected", "versions": [{"version": "0:2012.2.3-8.el6ost", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:openstack:2::el6"]}, {"vendor": "Red Hat", "product": "Red Hat OpenStack Platform 16.2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openstack-glance", "defaultStatus": "unaffected", "cpes": ["cpe:/a:redhat:openstack:16.2"]}, {"vendor": "Red Hat", "product": "Red Hat OpenStack Platform 17.1", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openstack-glance", "defaultStatus": "unaffected", "cpes": ["cpe:/a:redhat:openstack:17.1"]}, {"vendor": "Red Hat", "product": "Red Hat OpenStack Platform 18.0", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openstack-glance", "defaultStatus": "unaffected", "cpes": ["cpe:/a:redhat:openstack:18.0"]}], "references": [{"url": "http://osvdb.org/91304"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-0707.html"}, {"url": "http://secunia.com/advisories/52565"}, {"url": "http://www.openwall.com/lists/oss-security/2013/03/14/15"}, {"url": "http://www.securityfocus.com/bid/58490"}, {"url": "http://www.ubuntu.com/usn/USN-1764-1"}, {"url": "https://access.redhat.com/errata/RHSA-2013:0707", "name": "RHSA-2013:0707", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2013-1840", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugs.launchpad.net/glance/+bug/1135541"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82878"}, {"url": "https://review.openstack.org/#/c/24437/"}, {"url": "https://review.openstack.org/#/c/24438/"}, {"url": "https://review.openstack.org/#/c/24439/"}], "datePublic": "2013-03-22T21:00:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-201", "description": "Insertion of Sensitive Information Into Sent Data", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-201: Insertion of Sensitive Information Into Sent Data", "workarounds": [{"lang": "en", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}], "timeline": [{"lang": "en", "time": "2026-04-02T15:06:11.210Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2013-03-22T21:00:00.000Z", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-30T18:03:59.725Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T15:13:33.277Z"}, "title": "CVE Program Container", "references": [{"name": "openstack-glance-api-info-disclosure(82878)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82878"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://review.openstack.org/#/c/24437/"}, {"name": "USN-1764-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-1764-1"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://review.openstack.org/#/c/24438/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.launchpad.net/glance/+bug/1135541"}, {"name": "52565", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/52565"}, {"name": "RHSA-2013:0707", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2013-0707.html"}, {"name": "91304", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/91304"}, {"name": "[oss-security] 20130314 [OSSA 2013-007] Backend credentials leak in Glance v1 API (CVE-2013-1840)", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2013/03/14/15"}, {"name": "58490", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/58490"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://review.openstack.org/#/c/24439/"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2013-1840", "datePublished": "2013-03-22T21:00:00.000Z", "dateReserved": "2013-02-19T00:00:00.000Z", "dateUpdated": "2026-10-30T18:03:59.725Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.2"}

{}

{"affected": [{"affectedData": [{"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openstack:2::el6"], "defaultStatus": "affected", "packageName": "openstack-glance", "product": "OpenStack Folsom for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:2012.2.3-8.el6ost", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openstack:16.2"], "defaultStatus": "unaffected", "packageName": "openstack-glance", "product": "Red Hat OpenStack Platform 16.2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openstack:17.1"], "defaultStatus": "unaffected", "packageName": "openstack-glance", "product": "Red Hat OpenStack Platform 17.1", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openstack:18.0"], "defaultStatus": "unaffected", "packageName": "openstack-glance", "product": "Red Hat OpenStack Platform 18.0", "vendor": "Red Hat"}], "source": "secalert@redhat.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openstack:glance:v1:*:*:*:*:*:*:*", "matchCriteriaId": "3E39288B-D80F-493D-BD2A-6A749EBCE0AB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*", "matchCriteriaId": "E5FDB43F-B315-4F68-9D86-B644F2D4DF9A", "vulnerable": false}, {"criteria": "cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*", "matchCriteriaId": "E76B76AB-D744-4163-8615-7BA18ABB1347", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:amazon:s3_store:-:*:*:*:*:*:*:*", "matchCriteriaId": "05BC26BF-62C4-47E9-81B1-C968904F1FF2", "vulnerable": false}, {"criteria": "cpe:2.3:a:openstack:swift:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE675165-BF5F-4BB3-964F-777CC3DDFF98", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials."}, {"lang": "es", "value": "La API v1 en OpenStack Vistazo Essex (2012.1), Folsom (2012.2) y Grizzly, al utilizar el 'single-tenant Swift' o la tienda S3, informa el campo de ubicaci\u00f3n, lo que permite obtener las credenciales del back-end del operador a usuarios remotos autenticados a trav\u00e9s de una solicitud de una imagen almacenada en cach\u00e9."}], "id": "CVE-2013-1840", "lastModified": "2026-10-30T19:17:27.123", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "secalert@redhat.com", "type": "Primary"}]}, "published": "2013-03-22T21:55:01.487", "references": [{"source": "secalert@redhat.com", "url": "http://osvdb.org/91304"}, {"source": "secalert@redhat.com", "url": "http://rhn.redhat.com/errata/RHSA-2013-0707.html"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/52565"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2013/03/14/15"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/58490"}, {"source": "secalert@redhat.com", "url": "http://www.ubuntu.com/usn/USN-1764-1"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2013:0707"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2013-1840"}, {"source": "secalert@redhat.com", "url": "https://bugs.launchpad.net/glance/+bug/1135541"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82878"}, {"source": "secalert@redhat.com", "url": "https://review.openstack.org/#/c/24437/"}, {"source": "secalert@redhat.com", "url": "https://review.openstack.org/#/c/24438/"}, {"source": "secalert@redhat.com", "url": "https://review.openstack.org/#/c/24439/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/91304"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://rhn.redhat.com/errata/RHSA-2013-0707.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/52565"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2013/03/14/15"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/58490"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/USN-1764-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugs.launchpad.net/glance/+bug/1135541"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82878"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://review.openstack.org/#/c/24437/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://review.openstack.org/#/c/24438/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://review.openstack.org/#/c/24439/"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-201"}], "source": "secalert@redhat.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{"acknowledgement": "Red Hat would like to thank OpenStack project for reporting this issue. Upstream acknowledges Stuart McLaren (HP) as the original reporter.", "affected_release": [{"advisory": "RHSA-2013:0707", "cpe": "cpe:/a:redhat:openstack:2::el6", "package": "openstack-glance-0:2012.2.3-8.el6ost", "product_name": "OpenStack Folsom for RHEL 6", "release_date": "2013-04-04T00:00:00Z"}], "bugzilla": {"description": "Glance: Backend credentials leak in Glance v1 API", "id": "920393", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920393"}, "csaw": false, "cvss": {"cvss_base_score": "3.5", "cvss_scoring_vector": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "status": "verified"}, "details": ["The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image."], "name": "CVE-2013-1840", "package_state": [{"cpe": "cpe:/a:redhat:openstack:2.1", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "Red Hat OpenStack Platform 2.1"}, {"cpe": "cpe:/a:redhat:openstack:1", "fix_state": "Affected", "package_name": "openstack-glance", "product_name": "RHOS Essex Release"}], "public_date": "2013-03-14T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2013-1840\nhttps://nvd.nist.gov/vuln/detail/CVE-2013-1840"], "threat_severity": "Moderate"}

{}