CVE-2013-4354: Openstack Image Registry And Delivery Service (glance)

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.

Affected products

• Openstack Image Registry And Delivery Service (glance): affected versions not specified

Published 2013-11-23. Last modified 2026-06-16.