CVE-2012-4573
OpenStack Glance arbitrary deletion of non-protected images
CVE-2012-4573 is a medium vulnerability (CVSS 5.5) in Openstack Essex, published November 11, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.41%, the 89th percentile. Fixed in glance 11.0.0a0.
- Severity
- 5.5 MediumCVSS 2.0, NVD
- Exploit chance
- 3.41%EPSS, 89th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
11.0.0a0glance +6 more
Description
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glancePyPI | before 11.0.0a0 | 11.0.0a0 |
glanceDebian:12 | before 2012.1.1-2 | 2012.1.1-2 |
glanceDebian:13 | before 2012.1.1-2 | 2012.1.1-2 |
glanceDebian:14 | before 2012.1.1-2 | 2012.1.1-2 |
openstack-glanceRed Hat:openstack:1::el6 | before 0:2012.1.2-2.el6 | 0:2012.1.2-2.el6 |
openstack-glance-docRed Hat:openstack:1::el6 | before 0:2012.1.2-2.el6 | 0:2012.1.2-2.el6 |
python-glanceRed Hat:openstack:1::el6 | before 0:2012.1.2-2.el6 | 0:2012.1.2-2.el6 |
What each source reports
NVD Score used
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
CVE-2012-4573- CVSS 2.0
- 5.5 Medium
AV:N/AC:L/Au:S/C:N/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
CVE-2012-4573- Updated
- 2026-11-02
EUVDEUVD-2012-0039No score
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
EUVD-2012-0039- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6rrm-xxvh-7r87No score
OpenStack Glance arbitrary deletion of non-protected images
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
GHSA-6rrm-xxvh-7r87- Updated
- 2026-11-02
OSVNo score
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
CVE-2012-4573- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4573No score
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
DEBIAN-CVE-2012-4573- Updated
- 2026-11-02
OSVGHSA-6rrm-xxvh-7r87No score
OpenStack Glance arbitrary deletion of non-protected images
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
GHSA-6rrm-xxvh-7r87- Updated
- 2026-11-02
OSVPYSEC-2012-29No score
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
- Record
PYSEC-2012-29- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/51174
ubuntu.com/usn/USN-1626-1
rhn.redhat.com/errata/RHSA-2012-1558.html
securityfocus.com/bid/56437
github.com/openstack/glance/commit/90bcdc5a89e350a358cf320a03f5afe99795f6f6
Show 22 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html
openwall.com/lists/oss-security/2012/11/07/6
packetstormsecurity.com/files/118733/Red-Hat-Security-Advisory-2012-1558-01.html
osvdb.org/87248
bugs.launchpad.net/glance/+bug/1065187
lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html
exchange.xforce.ibmcloud.com/vulnerabilities/79895
nvd.nist.gov/vuln/detail/CVE-2012-4573
security-tracker.debian.org/tracker/CVE-2012-4573
access.redhat.com/errata/RHSA-2012:1558
bugzilla.redhat.com/show_bug.cgi?id=872302
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1558.json
cve.org/CVERecord?id=CVE-2012-4573