CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change.

• CWE-284

• http://www.securityfocus.com/bid/93106Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/glance/+bug/1593799/Issue Tracking, Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05273584Mitigation, Vendor Advisory
• https://wiki.openstack.org/wiki/OSSN/OSSN-0075Technical Description, Third Party Advisory
• http://www.securityfocus.com/bid/93106Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/glance/+bug/1593799/Issue Tracking, Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05273584Mitigation, Vendor Advisory
• https://wiki.openstack.org/wiki/OSSN/OSSN-0075Technical Description, Third Party Advisory

Published

Jun 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4377HPE Smart Update in Storage Sizing Tool before 13.0, Converg…
• CVE-2016-4378The (1) Device Manager, (2) Tiered Storage Manager, (3) Repl…
• CVE-2016-4379The TLS implementation in HPE Integrated Lights-Out 3 (aka i…
• CVE-2016-4380Cross-site scripting (XSS) vulnerability in the AdminUI in H…
• CVE-2016-4381HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x throu…
• CVE-2016-4382HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50…
• CVE-2016-4384HPE Performance Center before 12.50 and LoadRunner before 12…
• CVE-2016-4385The RMI service in HP Network Automation Software 9.1x, 9.2x…
• CVE-2016-4386HPE Network Automation Software 10.10 allows local users to …
• CVE-2016-4387The Filter SDK in HPE KeyView 10.18 through 10.24 allows rem…
• CVE-2016-4388The Filter SDK in HPE KeyView 10.18 through 10.24 allows rem…
• CVE-2016-4389The Filter SDK in HPE KeyView 10.18 through 10.24 allows rem…