CVE-2014-1948

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

CVE-2014-1948: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading th...

PT-2014-4378

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions 2013.2 through 2013.2.1 OpenStack Image Registry and Delivery Service Glance Icehouse before icehouse-2 Description The issue allows local users to obtain sensitive information by...

DEBIAN-CVE-2014-0006

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

PYSEC-2014-116

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

Code injection

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

CVE-2014-0006

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

CVE-2014-0006

The CVE-2014-0006 issue affects OpenStack Swift, where the TempURL middleware exhibits a timing side-channel risk that can leak secret URLs. Affected releases are Swift 1.4.6–1.8.0, 1.9.0–1.10.0, and 1.11.0. Root cause: timing-based information leakage in TempURL handling when an object name is k...

CVE-2014-0006: Exposure of Sensitive Information to an Unauthorized Actor

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

UBUNTU-CVE-2014-0006

The TempURL middleware in OpenStack Object Storage Swift 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack...

PT-2014-3428

Name of the Vulnerable Software and Affected Versions OpenStack Object Storage Swift versions 1.4.6 through 1.8.0 OpenStack Object Storage Swift versions 1.9.0 through 1.10.0 OpenStack Object Storage Swift version 1.11.0 Description The issue allows remote attackers to obtain secret URLs by...

Threat Outbreak Alert: Fake Bank Payment Information Email Messages on November 11, 2013

Medium Alert ID: 31708 First Published: 2013 November 11 17:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to op...

Ubuntu Update for swift USN-2001-1

Check for the Version of swift OpenVAS Vulnerability Test $Id: gbubuntuUSN20011.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for swift USN-2001-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Ubuntu: Security Advisory (USN-2001-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2001-1] Swift vulnerability

========================================================================== Ubuntu Security Notice USN-2001-1 October 23, 2013 swift vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS / 12.10 / 13.04 : swift vulnerability (USN-2001-1)

Peter Portante discovered that Swift did not properly handle requests with old X-Timestamp values. An authenticated attacker could exploit this to cause a denial of service via disk consumption. Note that Tenable Network Security has extracted the preceding description block directly from the...

USN-2001-1: Swift vulnerability

Peter Portante discovered that Swift did not properly handle requests with old X-Timestamp values. An authenticated attacker could exploit this to cause a denial of service via disk consumption...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on October 21, 2013

Medium Alert ID: 31398 First Published: 2013 October 22 20:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain money transfer details for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Bank Swift Payment Notification Email Messages on October 8, 2013

Medium Alert ID: 31182 First Published: 2013 October 9 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain bank payment information for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Swift Transaction Notification Email Messages on October 3, 2013

Medium Alert ID: 31118 First Published: 2013 October 4 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a swift transaction notification for the recipient. The text in the email message attempts to convince the...