store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glance | Jul 30, 2024 | Feb 24, 2013 |
| Suse | — | Upgrade openstack-nova-apiUpgrade python-quantumUpgrade openstack-dashboard-testUpgrade openstack-glance-docUpgrade python-keystoneclient-docUpgrade openstack-cinder-apiUpgrade python-cinderclient-docUpgrade python-keystoneUpgrade python-swiftUpgrade python-horizonUpgrade openstack-glance-testUpgrade python-cinderclient-testUpgrade openstack-quantum-testUpgrade openstack-swift-containerUpgrade python-cinderUpgrade openstack-nova-computeUpgrade openstack-swift-objectUpgrade openstack-swiftUpgrade openstack-nova-vncproxyUpgrade openstack-nova-novncproxyUpgrade openstack-dashboardUpgrade openstack-keystone-testUpgrade openstack-keystone-docUpgrade python-keystoneclient-testUpgrade openstack-nova-schedulerUpgrade openstack-nova-certUpgrade openstack-swift-proxyUpgrade openstack-keystoneUpgrade openstack-nova-docUpgrade python-glanceUpgrade openstack-quickstartUpgrade openstack-swift-testUpgrade openstack-nova-testUpgrade openstack-cinder-docUpgrade openstack-novaUpgrade openstack-swift-docUpgrade openstack-quantumUpgrade openstack-cinder-testUpgrade python-cinderclientUpgrade openstack-quantum-docUpgrade openstack-nova-volumeUpgrade openstack-cinder-schedulerUpgrade openstack-glanceUpgrade openstack-nova-networkUpgrade openstack-nova-objectstoreUpgrade openstack-cinderUpgrade openstack-cinder-volumeUpgrade openstack-swift-accountUpgrade python-django_openstack_authUpgrade python-keystoneclientUpgrade python-nova | Dec 12, 2013 | Feb 24, 2013 |
| Ubuntu | — | Upgrade python-glance | Nov 8, 2024 | Feb 24, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub