PyPI/glance CVE-2014-1948: medium 6.2, EPSS 0.31%

OpenStack Glance sensitive information disclosure via logs

Action: Upgrade glance to 11.0.0a0 or later.

pip install glance==11.0.0a0

Affected

Fixed versions

Sources

• osv: GHSA-4xw6-hj5p-4j79
• https://nvd.nist.gov/vuln/detail/CVE-2014-1948
• https://github.com/openstack/glance/commit/108f0e04ad2ed3dc287f1b71b987a7e9d66072ba
• https://github.com/openstack/glance/commit/f6e41e9c0ff3aa9ee57b8c8ed8c789f1aff019bc
• https://bugs.launchpad.net/glance/+bug/1275062
• https://github.com/openstack/glance
• https://github.com/pypa/advisory-database/tree/main/vulns/glance/PYSEC-2014-102.yaml
• http://rhn.redhat.com/errata/RHSA-2014-0229.html
• http://www.openwall.com/lists/oss-security/2014/02/12/18

CVE-2014-1948 · published 2022-05-17T04:50:15Z · modified 2024-11-26T18:37:55Z · JSON