---
id: CVE-2013-1840
title: >-
  Openstack glance: swift: s3: openstack glance: information disclosure of
  backend credentials via cached image request
summary: >-
  A flaw was found in OpenStack Glance. Remote authenticated users can exploit
  this vulnerability by requesting a cached image when the single-tenant Swift
  or S3 store is in use. This action causes the system to report the location
  field, …
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-201
vendor: Red Hat
product: openstack-glance
affected:
  - openstack-glance (all versions)
  - openstack-glance
  - openstack-glance
  - openstack-glance
published: '2013-03-22'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T18:03:59.725Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2013-1840'
references:
  - url: 'http://osvdb.org/91304'
  - url: 'http://rhn.redhat.com/errata/RHSA-2013-0707.html'
  - url: 'http://secunia.com/advisories/52565'
  - url: 'http://www.openwall.com/lists/oss-security/2013/03/14/15'
  - url: 'http://www.securityfocus.com/bid/58490'
  - url: 'http://www.ubuntu.com/usn/USN-1764-1'
  - url: 'https://access.redhat.com/errata/RHSA-2013:0707'
    label: 'RHSA-2013:0707'
  - url: 'https://access.redhat.com/security/cve/CVE-2013-1840'
  - url: 'https://bugs.launchpad.net/glance/+bug/1135541'
  - url: 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82878'
  - url: 'https://review.openstack.org/#/c/24437/'
  - url: 'https://review.openstack.org/#/c/24438/'
  - url: 'https://review.openstack.org/#/c/24439/'
tags:
  - cve.org
epss: 0.01702
epssPercentile: 0.77364
ingestedAt: '2026-11-05T16:24:31.293Z'
---

## Overview

A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials.

## Affected

- `openstack-glance (all versions)`
- `openstack-glance`
- `openstack-glance`
- `openstack-glance`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.