CVE-2014-1948

2014-02-1415:55:06

CWE-255

[email protected]

web.nvd.nist.gov

CVSS2

2.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:P/A:N

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.

Affected configurations

Nvd

Node

openstackimage_registry_and_delivery_service_\(glance\)Match2013.2

openstackimage_registry_and_delivery_service_\(glance\)Match2013.2.1

VendorProductVersionCPE
openstackimage_registry_and_delivery_service_\(glance\)2013.2cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):2013.2:*:*:*:*:*:*:*
openstackimage_registry_and_delivery_service_\(glance\)2013.2.1cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):2013.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openstack	image_registry_and_delivery_service_\(glance\)	2013.2	cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):2013.2:::::::*
openstack	image_registry_and_delivery_service_\(glance\)	2013.2.1	cpe:2.3:a:openstack:image_registry_and_delivery_service_\(glance\):2013.2.1:::::::*