What’s Vulnerable › Vulnerabilities

CVE-2022-4134

• Severity: low (CVSS 2.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-06 · updated 2026-06-17
• Weakness: CWE-829

Description

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

Affected products

• OpenStack Glance: all versions
• OpenStack: 13, 16.1, 16.2, 17

References

• https://bugs.launchpad.net/glance/+bug/1990157
• https://bugzilla.redhat.com/show_bug.cgi?id=2147462
• https://wiki.openstack.org/wiki/OSSN/OSSN-0090
• https://bugs.launchpad.net/glance/+bug/1990157
• https://bugzilla.redhat.com/show_bug.cgi?id=2147462
• https://wiki.openstack.org/wiki/OSSN/OSSN-0090

Get alerted when CVE-2022-4134 or the next vulnerability affects your stack