Skip to main content
CVE-2024-1141VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-glance-store) security update

Affects Red HatSource GCVE Database

0
Authoritative record:CVE-2024-1141· Medium 5.5

Not known to be exploited · CVSS 5.5 Medium.

Data as of 26 Oct 2026, 06:26 UTC

CVSS base score
5.5Medium
How severe the flaw is on the 0–10 CVSS scale.
EPSS
0.2% chance of exploitation in 30 days – higher than 13% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 1 Feb 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.

What to do

Affected software

ProductAffectedFixed in
Red Hat Product Security Red HatAffected
  • Red Hat
  • Red Hat OpenStack Platform
  • Red Hat OpenStack Platform 17.1
  • src
  • python-glance-store-0:2.5.1-17.1.20230621023901.el9ost.src
Fixed in–

AI-suggested

Red Hat has released an official security update for python-glance-store in Red Hat OpenStack Platform 17.1 on RHEL 9 to address this vulnerability. Users should apply the update following the instructions in the Red Hat advisory (https://access.redhat.com/articles/11258). No additional mitigations are specified or required beyond applying the official patch.

Description

OpenStack image service store library Security Fix(es): * Glance Store access key logged in DEBUG log level (CVE-2024-1141) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

References

Community reviews

Loading reviews…