{"action":"Upgrade glance to 2013.2-1 or later.","affected":[{"fixed":"2013.2-1","introduced":"0"}],"component":"glance","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2013.2-1"],"id":"tcs_01M5NAH9P0C9B84EFFZ8T6S0SX","modified_at":"2026-10-31T04:00:04.020895808Z","published_at":"2013-10-27T00:55:03.963Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-4428","https://security-tracker.debian.org/tracker/CVE-2013-4428"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-4428","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-4428"}],"summary":"OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cac"}