CVE-2016-0757 OpenStack Image Service (Glance) vulnerable to Improper Access Control
Authenticated users can modify image status and upload data by removing the last location when multiple locations are enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-0757?
CVE-2016-0757 is a medium-severity missing authorization vulnerability in n/a, published on 13 Apr 2016. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image.
Weakness: CWE-284
Which versions are affected by CVE-2016-0757?
3 open source packages ship an affected version, including glance. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
glance PyPI | From 11.0.0 | 11.0.2 |
glance PyPI | From 11.0.0 | 11.0.2 |
glance PyPI | From 11.0.0 | 11.0.2 |
Linux distribution packages (12)
openstack-glance Red Hat:openstack:5::el6 | All versions | 0:2014.1.5-5.el6ost |
openstack-glance-doc Red Hat:openstack:5::el6 | All versions | 0:2014.1.5-5.el6ost |
python-glance Red Hat:openstack:5::el6 | All versions | 0:2014.1.5-5.el6ost |
openstack-glance Red Hat:openstack:5::el7 | All versions | 0:2014.1.5-5.el7ost |
openstack-glance-doc Red Hat:openstack:5::el7 | All versions | 0:2014.1.5-5.el7ost |
python-glance Red Hat:openstack:5::el7 | All versions | 0:2014.1.5-5.el7ost |
openstack-glance Red Hat:openstack:6::el7 | All versions | 0:2014.2.3-4.el7ost |
openstack-glance-doc Red Hat:openstack:6::el7 | All versions | 0:2014.2.3-4.el7ost |
python-glance Red Hat:openstack:6::el7 | All versions | 0:2014.2.3-4.el7ost |
openstack-glance Red Hat:openstack:7::el7 | All versions | 0:2015.1.2-2.el7ost |
openstack-glance-doc Red Hat:openstack:7::el7 | All versions | 0:2015.1.2-2.el7ost |
python-glance Red Hat:openstack:7::el7 | All versions | 0:2015.1.2-2.el7ost |
Products include Openstack Image Registry and Delivery Service \(Glance\).
How do I fix CVE-2016-0757?
Upgrade glance to 11.0.2 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2016-0757 being exploited?
There is no known exploitation of CVE-2016-0757 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2015-5286 OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
- CVE-2015-1195 OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme
- CVE-2015-5251 OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions
- CVE-2014-9493 Path traversal in n/a
- CVE-2014-9684 OpenStack Glance Denial of service by creating a large number of images
Sources
Also known as DEBIAN-CVE-2016-0757, GHSA-5xrj-ghhp-hx7p, PYSEC-2026-811, RHSA-2016:0309, RHSA-2016:0352, RHSA-2016:0354 and 2 more.