CVE-2012-5482

OpenStack Glance arbitrary deletion of non-protected images

5.5 MediumFix available

CVE-2012-5482 is a medium vulnerability (CVSS 5.5) in Openstack Essex, published November 11, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.74%, the 86th percentile. Fixed in glance 11.0.0a0.

The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573.

Exploit likelihood

2.74%Up 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

Record: CVE-2012-5482
CVSS 2.0: 5.5 MediumAV:N/AC:L/Au:S/C:N/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-5482
Updated: 2026-11-02

EUVDEUVD-2012-0040 No score

Record: EUVD-2012-0040
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vwr9-9f8v-vp5m No score

OpenStack Glance arbitrary deletion of non-protected images

Record: GHSA-vwr9-9f8v-vp5m
Updated: 2026-11-02

OSV No score

Record: CVE-2012-5482
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-5482 No score

Record: DEBIAN-CVE-2012-5482
Updated: 2026-11-02

OSVGHSA-vwr9-9f8v-vp5m No score

OpenStack Glance arbitrary deletion of non-protected images

Record: GHSA-vwr9-9f8v-vp5m
Updated: 2026-11-02

OSVPYSEC-2012-30 No score

Record: PYSEC-2012-30
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`glance` PyPI	before 11.0.0a0	11.0.0a0
`glance` Debian:12	before 2012.1.1-3	2012.1.1-3
`glance` Debian:13	before 2012.1.1-3	2012.1.1-3
`glance` Debian:14	before 2012.1.1-3	2012.1.1-3

History

History
When	Changed	Sources
2026-11-03	affected
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 12 moreShow less