How severe is CVE-2024-1141?

CVE-2024-1141 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2024-1141 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (13th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-1141?

CVE-2024-1141 affects Openstack Glance-store. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-1141?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-1141 have an EU (EUVD) identifier?

Yes. CVE-2024-1141 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-0752.

When was CVE-2024-1141 published?

CVE-2024-1141 was published on 2024-02-01 and last updated on 2026-06-17.

CVE-2024-1141

CVE-2024-1141 is a medium-severity vulnerability in Openstack Glance-store with a CVSS 3.x base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-779.

Key facts

Severity: Medium (CVSS 3.x base score 5.5)
EPSS exploit prediction: 0% (13th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-0752
Weakness: CWE-779
Affected product: Openstack Glance-store
Published: 2024-02-01
Last modified: 2026-06-17

Description

A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.

Frequently asked questions

What is CVE-2024-1141?: A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.
How severe is CVE-2024-1141?: CVE-2024-1141 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2024-1141 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (13th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-1141?: CVE-2024-1141 affects Openstack Glance-store. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-1141?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-1141 have an EU (EUVD) identifier?: Yes. CVE-2024-1141 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-0752.
When was CVE-2024-1141 published?: CVE-2024-1141 was published on 2024-02-01 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:openstack:glance-store:*:*:*:*:*:*:*:*

Other CWE-779 vulnerabilities

CVE-2024-36072 — Critical (CVSS 9.8): Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution…
CVE-2024-36416 — High (CVSS 8.6): SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and…
CVE-2026-28718 — High (CVSS 7.5): Denial of service due to insufficient input validation in authentication logging. The following products are affected:…
CVE-2025-8696 — High (CVSS 7.5): If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for…
CVE-2022-22291 — Medium (CVSS 5.5): Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get…
CVE-2026-20210 — Medium (CVSS 5.4): A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated,…

Browse all CWE-779 vulnerabilities →