Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 4:50 a.m.25 views

OpenStack Glance sensitive information disclosure via logs

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

2.6CVSS6.7AI score0.00314EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2019/01/15 8:57 a.m.25 views

Information Disclosure

openstack-glance is vulnerable to information disclosure attacks. The vulnerability exists as OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING...

2.6CVSS5.5AI score0.00314EPSS
Exploits0References8Affected Software1
RedHat Linux
RedHat Linux
added 2014/03/04 7:0 p.m.3 views

openstack-glance: Glance Swift store backend password leak

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

2.6CVSS5.8AI score0.00314EPSS
Exploits0References4
NVD
NVD
added 2014/02/14 3:55 p.m.28 views

CVE-2014-1948

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

2.6CVSS6AI score0.00314EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2014/02/14 3:55 p.m.32 views

CVE-2014-1948

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

2.6CVSS5.9AI score0.00314EPSS
Exploits0References3
Rows per page
Query Builder