CVE-2014-1948

CVE-2014-1948 affects OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 through 2013.2.1 and Icehouse era before icehouse-2, where a failed authentication with WARNING-level logging enables local users to read a log entry containing the Swift store backend password. The vulne...

CVE-2014-1948

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

CVE-2014-1948

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

DEBIAN-CVE-2014-0006

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

Code injection

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

PYSEC-2014-116

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

CVE-2014-0006

The CVE-2014-0006 issue affects OpenStack Swift, where the TempURL middleware exhibits a timing side-channel risk that can leak secret URLs. Affected releases are Swift 1.4.6–1.8.0, 1.9.0–1.10.0, and 1.11.0. Root cause: timing-based information leakage in TempURL handling when an object name is k...

UBUNTU-CVE-2014-0006

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

Threat Outbreak Alert: Fake Bank Payment Information Email Messages on November 11, 2013

Medium Alert ID: 31708 First Published: 2013 November 11 17:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to op...

Ubuntu Update for swift USN-2001-1

Check for the Version of swift OpenVAS Vulnerability Test $Id: gbubuntuUSN20011.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for swift USN-2001-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Ubuntu: Security Advisory (USN-2001-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2001-1] Swift vulnerability

========================================================================== Ubuntu Security Notice USN-2001-1 October 23, 2013 swift vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS / 12.10 / 13.04 : swift vulnerability (USN-2001-1)

Peter Portante discovered that Swift did not properly handle requests with old X-Timestamp values. An authenticated attacker could exploit this to cause a denial of service via disk consumption. Note that Tenable Network Security has extracted the preceding description block directly from the...

USN-2001-1: Swift vulnerability

Peter Portante discovered that Swift did not properly handle requests with old X-Timestamp values. An authenticated attacker could exploit this to cause a denial of service via disk consumption...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on October 21, 2013

Medium Alert ID: 31398 First Published: 2013 October 22 20:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain money transfer details for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Bank Swift Payment Notification Email Messages on October 8, 2013

Medium Alert ID: 31182 First Published: 2013 October 9 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain bank payment information for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Swift Transaction Notification Email Messages on October 3, 2013

Medium Alert ID: 31118 First Published: 2013 October 4 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a swift transaction notification for the recipient. The text in the email message attempts to convince the...

NSA Intelligence Agency spies on International Credit Card Transactions including Visa

"The truth is coming, and it cannot be stopped", Edward Snowden. The National Security Agency isn't just snooping into phone and online communications. It also appears to be keeping a close eye on credit card transactions. New reports published by Der Spiegel exposed that The National Security...

NSA Intelligence Agency spies on International Credit Card Transactions including Visa

"The truth is coming, and it cannot be stopped", Edward Snowden. The National Security Agency isn’t just snooping into phone and online communications. It also appears to be keeping a close eye on credit card transactions. New reports published by Der Spiegel exposed that The National Security...

Threat Outbreak Alert: Fake Bank Deposit Notification Email Messages on September 5, 2013

Medium Alert ID: 30680 First Published: 2013 September 6 19:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit notification. The email message attempts to convince the recipient to open the attachment to...