OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
Date: 2022-05
Affected: pip/glance
Attack vector: rce
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2014-0162
CWE: CWE-20

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.


Mitigations:

Architectural layers (MAESTRO):