CVE-2013-1840

CVE-2013-1840 describes an information disclosure vulnerability in OpenStack Glance versions Essex, Folsom, and Grizzly, specifically when configured with single-tenant Swift or S3 stores. Authenticated attackers can exploit this flaw to retrieve the operator's backend credentials by requesting a cached image, as the system incorrectly reports the location field. This vulnerability has a CVSS score of 3.5 (Medium), indicating a network-based attack with medium complexity requiring authentication, leading to partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.