store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glance | Jul 30, 2024 | Feb 24, 2013 |
| Suse | — | Upgrade openstack-nova-certUpgrade openstack-swift-docUpgrade python-django_openstack_authUpgrade openstack-cinder-testUpgrade openstack-cinder-volumeUpgrade openstack-swift-proxyUpgrade openstack-nova-docUpgrade openstack-nova-testUpgrade openstack-keystoneUpgrade openstack-quantum-docUpgrade openstack-swift-testUpgrade openstack-cinder-docUpgrade openstack-swift-accountUpgrade python-novaUpgrade openstack-quantumUpgrade openstack-nova-objectstoreUpgrade openstack-cinderUpgrade openstack-glanceUpgrade python-cinderclientUpgrade openstack-cinder-schedulerUpgrade openstack-novaUpgrade openstack-nova-volumeUpgrade python-keystoneclientUpgrade openstack-quickstartUpgrade python-glanceUpgrade openstack-nova-networkUpgrade python-cinderclient-docUpgrade openstack-dashboardUpgrade python-keystoneUpgrade openstack-nova-vncproxyUpgrade openstack-swift-objectUpgrade openstack-swift-containerUpgrade python-cinderUpgrade python-quantumUpgrade python-horizonUpgrade openstack-nova-novncproxyUpgrade openstack-nova-schedulerUpgrade openstack-nova-apiUpgrade python-cinderclient-testUpgrade python-keystoneclient-testUpgrade openstack-quantum-testUpgrade openstack-cinder-apiUpgrade openstack-keystone-docUpgrade openstack-keystone-testUpgrade openstack-dashboard-testUpgrade python-swiftUpgrade openstack-swiftUpgrade openstack-glance-testUpgrade openstack-glance-docUpgrade openstack-nova-computeUpgrade python-keystoneclient-doc | Dec 12, 2013 | Feb 24, 2013 |
| Ubuntu | — | Upgrade python-glance | Nov 8, 2024 | Feb 24, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub