CVE-2022-4134

Katalog CVE

CVSS 2.8 · Low EPSS 0,33%

Kerentanan Inclusion of Functionality from Untrusted Control Sphere pada openstack glance, redhat openstack. Skor CVSS 3.1 2.8 (Low) menurut NVD.

Deskripsi (NVD)

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

Rincian

Terbit di NVD

6 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.8 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-829: Inclusion of Functionality from Untrusted Control Sphere

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 23,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wiki.openstack.org/wiki/OSSN/OSSN-0090 advisory vendor
• https://bugs.launchpad.net/glance/+bug/1990157 issue tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=2147462 issue tracking