Lucene search
+L
OpenstackSwauth

1 matches found

CVE
CVE
added 2017/11/21 1:0 p.m.81 views

CVE-2017-16613

CVE-2017-16613 affects OpenStack Swauth (middleware.py) when used with OpenStack Swift up to versions 2.15.1. The issue: the Swift object store and proxy may save unhashed authentication tokens to a log file as part of GET URIs, which enables an attacker to bypass authentication by injecting a to...

9.8CVSS9.3AI score0.08354EPSS
Save