Vulnerabilities (CVE)

Filtered by vendor Amazon Subscribe
Filtered by product S3 Store
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-1840 2 Amazon, Openstack 5 S3 Store, Essex, Folsom and 2 more 2024-11-21 3.5 LOW N/A
The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image.