CVE-2024-1141 Glance-store: glance store access key logged in debug log level

A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...

CVE-2024-1141

CVE-2024-1141 concerns the python-glance-store library, where logging the access_key occurs when DEBUG is enabled. Multiple sources (Red Hat RHSA-2024:2732, USN-6630-1, OSSV references, and related Nessus plugins) confirm the issue and link it to Glance_store’s handling of sensitive data in logs,...

CVE-2024-1141 Glance-store: glance store access key logged in debug log level

A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...

CVE-2024-1141 Glance-store: glance store access key logged in debug log level

A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...

CVE-2024-1141

A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...

CVE-2024-1141

A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled. Mitigation Avoid leaving the DEBUG log level enabled in critical environments...

PT-2024-16967

Name of the Vulnerable Software and Affected Versions python-glance-store affected versions not specified Description A vulnerability was found in python-glance-store. The issue occurs when the package logs the access key for the glance-store when the DEBUG log level is enabled. Recommendations A...

python-glance-store security vulnerability

python-glance-store is an open source library from pypi. A security vulnerability exists in python-glance-store that originates from storing access keys with DEBUG logging...

USN-6241-1 cinder, ironic, nova, python-glance-store, python-os-brick vulnerability

Jan Wasilewski and Gorka Eguileor discovered that OpenStack incorrectly handled deleted volume attachments. An authenticated user or attacker could possibly use this issue to gain access to sensitive information. This update may require configuration changes, please see the upstream advisory and...

USN-6241-1: OpenStack vulnerability

Jan Wasilewski and Gorka Eguileor discovered that OpenStack incorrectly handled deleted volume attachments. An authenticated user or attacker could possibly use this issue to gain access to sensitive information. This update may require configuration changes, please see the upstream advisory and...

Ubuntu: Security Advisory (USN-6073-7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6073-7 python-glance-store regression

USN-6073-2 fixed a vulnerability in Glancestore. Unfortunately the update introduced a regression with detaching volumes. The security fix has been removed pending further investigation. We apologize for the inconvenience. Original advisory details: Jan Wasilewski and Gorka Eguileor discovered th...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Glance_store regression (USN-6073-7)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6073-7 advisory. USN-6073-2 fixed a vulnerability in Glancestore. Unfortunately the update introduced a regression with detaching volumes. The security fix has...

Ubuntu: Security Advisory (USN-6073-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6073-2 python-glance-store vulnerability

Jan Wasilewski and Gorka Eguileor discovered that Glancestore incorrectly handled deleted volume attachments. An authenticated user or attacker could possibly use this issue to gain access to sensitive information. This update may require configuration changes to be completely effective, please s...

Fedora 21 : openstack-glance-2014.1.3-2.fc21 (2014-12627)

Upstreamed security patch CVE-2014-5356 - Glance store DoS through disk space exhaustion Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...