On March 15, Canonical published in a security notice details about OpenStack Glance vulnerability for its Ubuntu 12.10 and Ubuntu 12.04 operating systems.
According to Canonical, Glance could be made to expose sensitive information over the network.
Stuart McLaren discovered an issue with Glance v1 API requests. An authenticated attacker could exploit this to expose the Glance operator’s Swift and/or S3 credentials via the response headers when requesting a cached image…. (read more)