{"id":"CVE-2013-1840","title":"Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request","summary":"A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, …","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-201"],"vendor":"Red Hat","product":"openstack-glance","affected":["openstack-glance (all versions)","openstack-glance","openstack-glance","openstack-glance"],"published":"2013-03-22","updated":"2026-10-30","sourceUpdated":"2026-10-30T18:03:59.725Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2013-1840","references":[{"url":"http://osvdb.org/91304"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0707.html"},{"url":"http://secunia.com/advisories/52565"},{"url":"http://www.openwall.com/lists/oss-security/2013/03/14/15"},{"url":"http://www.securityfocus.com/bid/58490"},{"url":"http://www.ubuntu.com/usn/USN-1764-1"},{"url":"https://access.redhat.com/errata/RHSA-2013:0707","label":"RHSA-2013:0707"},{"url":"https://access.redhat.com/security/cve/CVE-2013-1840"},{"url":"https://bugs.launchpad.net/glance/+bug/1135541"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82878"},{"url":"https://review.openstack.org/#/c/24437/"},{"url":"https://review.openstack.org/#/c/24438/"},{"url":"https://review.openstack.org/#/c/24439/"}],"tags":["cve.org"],"epss":0.01702,"epssPercentile":0.77364,"ingestedAt":"2026-11-05T16:24:31.293Z","slug":"CVE-2013-1840","body":"## Overview\n\nA flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.\n\n## Affected\n\n- `openstack-glance (all versions)`\n- `openstack-glance`\n- `openstack-glance`\n- `openstack-glance`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nMitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}