Executive brief
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
Affected products
- PyPI glance
Junglewise Threat Intelligence
CVE-2022-4134: PYSEC-2023-270 - A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integr
CVE-2022-4134 · Severity: low · CVSS 3.1 · Published 2023-03-06
Technologies: glance (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2493 - OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
- PYSEC-2026-868 - OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
- PYSEC-2026-817 - OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
- PYSEC-2026-816 - OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions
- PYSEC-2026-812 - OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service