Lucene search
GoogleOSV:USN-6630-1HistoryFeb 12, 2024 - 1:01 p.m.
python-glance-store vulnerability
2024-02-1213:01:08
Google
osv.dev
4
glance_store
vulnerability
logging
access_key
theft
local attacker
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
15.5%
It was discovered that Glance_store incorrectly handled logging when the
DEBUG log level is enabled. A local attacker could use this issue to obtain
access_key values.
Related
nessus
nessus
osv
osv
glance-store logs s3 access keys
2024-02-01 15:30:24
nvd
nvd
CVE-2024-1141
2024-02-01 15:15:08
debiancve
debiancve
CVE-2024-1141
2024-02-01 15:15:08
github
github
glance-store logs s3 access keys
2024-02-01 15:30:24
ubuntucve
ubuntucve
CVE-2024-1141
2024-02-01 00:00:00
prion
prion
Design/Logic Flaw
2024-02-01 15:15:00
cvelist
cvelist
cve
cve
CVE-2024-1141
2024-02-01 15:15:08
openvas
openvas
Ubuntu: Security Advisory (USN-6630-1)
2024-02-13 00:00:00
ubuntu
ubuntu
Glance_store vulnerability
2024-02-12 00:00:00
vulnrichment
vulnrichment
redhatcve
redhatcve
CVE-2024-1141
2024-02-01 01:14:20
redhat
redhat
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
15.5%
Related for OSV:USN-6630-1