CVE-2016-4383

high HPE
CVSS v3 Base Score
8.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
EPSS Score
0.6%
Exploitation probability in 30 days
Top 31% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Published: June 27, 2017 (3243 days ago)
Last Modified: May 13, 2026
Vendor: HPE
Source: NVD

Description

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change.

CWE

CWE-284

Affected Products

hp helion openstack glance

References

🔗 www.securityfocus.com 🔗 bugs.launchpad.net 🔗 h20566.www2.hpe.com 🔗 wiki.openstack.org 🔗 www.securityfocus.com