{"action":"Upgrade glance to 1:11.0.0-1 or later.","affected":[{"fixed":"1:11.0.0-1","introduced":"0"}],"component":"glance","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1:11.0.0-1"],"id":"tcs_01M5NB8AX6YK089D4HH6XK5ETN","modified_at":"2026-10-26T16:00:51.091521233Z","published_at":"2015-10-26T17:59:06.813Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-5251","https://security-tracker.debian.org/tracker/CVE-2015-5251"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-5251#Debian:13/glance","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-5251"}],"summary":"OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the"}