CVE-2022-4134

low-risk

Published 2023-03-06

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

Do I need to act?

0.18% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 2.8/10 Low

LOCAL / LOW complexity

Affected Products (5)

Glance

Openstack

Affected Vendors

Redhat Openstack

References (6)

Issue Tracking https://bugs.launchpad.net/glance/+bug/1990157

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2147462

Vendor Advisory https://wiki.openstack.org/wiki/OSSN/OSSN-0090

Issue Tracking https://bugs.launchpad.net/glance/+bug/1990157

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2147462

Vendor Advisory https://wiki.openstack.org/wiki/OSSN/OSSN-0090

/ 100

low-risk

Severity 11/34 · Low

Exploitability 1/34 · Minimal

Exposure 12/34 · Low