CVE-2013-6384

CVE-2013-6384 affects OpenStack Ceilometer 2013.2 and earlier. When logging level is INFO, impl_db2.py and impl_mongodb.py log the ceilometer.conf connection string, enabling local users to read sensitive information (DB2 or MongoDB password) from the log file. Multiple sources (SUSE, Ubuntu, Deb...