Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-4134

15
FAUCET Score

CVE-2022-4134 is a low-severity integrity flaw affecting OpenStack Glance and Red Hat OpenStack Glance, allowing an authenticated attacker to tamper with virtual machine images. The vulnerability has a CVSS score of 2.8 (low), indicating local access and user interaction are required, with the primary impact being a compromise of image integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:a:openstack:glance:*:*:*:*:*:*:*:*
13CPE matchmatch criteria
cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*
16.1CPE matchmatch criteria
cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*
16.2CPE matchmatch criteria
cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:*
17CPE matchmatch criteria
cpe:2.3:a:redhat:openstack:17:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

2.8LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
1.3
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.32%
Probability of exploitation in next 30 days
EPSS Percentile
24.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0032 is in the 73rd percentile among its peer group of 106 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

redhatvendor investigatingvia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: openstack-glance
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenStack Platform 17.0Fixed in: openstack-glance
redhatend of lifevia redhat_api
Product: Red Hat OpenStack Platform 13 (Queens)Fixed in: openstack-glance
redhatend of lifevia redhat_api
Product: Red Hat OpenStack Platform 16.1Fixed in: openstack-glance

Vendor Advisories (2)

pipGHSA-5gp5-vxj6-4257low

OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability

Mar 7, 2023
redhatCVE-2022-4134Moderate

openstack: glance & ceph conflict which allows image tampering

Oct 14, 2022

References

bugs.launchpad.net / glance/+bug/1990157
Issue Tracking
bugzilla.redhat.com / show_bug.cgi
Issue Tracking
wiki.openstack.org / wiki/OSSN/OSSN-0090
Vendor Advisory