CVE-2013-4111: The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the prever...

Security readout for executives and security teams

Older OpenStack Glance Python client versions may accept the wrong SSL certificate for a server. An attacker who can intercept network traffic could impersonate a Glance server with a valid certificate for another name, potentially exposing sensitive client communications. Exposure is likely limited to environments using python-glanceclient before 0.10.0, including affected distribution packages noted by Ubuntu, Red Hat, and openSUSE advisories. Risk is higher where clients connect over untrusted or interceptable networks. Treat as a targeted confidentiality and integrity risk, not a broad emergency. Prioritize remediation for OpenStack management hosts, automation systems, and environments where Glance client traffic crosses shared or untrusted networks. Mitigation focus: Upgrade python-glanceclient to 0.10.0 or later where applicable.; Apply relevant Ubuntu, Red Hat, or openSUSE security updates.; Review OpenStack and distribution vendor guidance for supported fixed package versions..

Prepared

Jun 14, 2026, 16:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.