2 matches found
The vulnerability of proxy-servers in intermediate software like Tempurl in distributed object storage systems, related to information disclosure, allows attackers to gain access to confidential data.
The vulnerability of proxy-servers in intermediate software like Tempurl in distributed object storage systems like Swift is related to the preservation of the full Tempurl path in logs. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
USN-3451-1 swift vulnerabilities
It was discovered that OpenStack Swift incorrectly handled tempurls. A remote authenticated user in possession of a tempurl key authorized for PUT could retrieve other objects in the same Swift account. CVE-2015-5223 Romain Le Disez and Örjan Persson discovered that OpenStack Swift incorrectly...