Lucene search
UbuntuUSN-2311-1HistoryAug 11, 2014 - 12:00 a.m.
pyCADF vulnerability
2014-08-1100:00:00
ubuntu.com
32
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.006 Low
EPSS
Percentile
79.1%
Releases
- Ubuntu 14.04 ESM
Packages
- python-pycadf - implementation of DMTF Cloud Audit (CADF) data model
Details
Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens.
An attacker could possibly use this issue to obtain authentication tokens
used in REST requests.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | python-pycadf | < 0.4.1-0ubuntu1.1 | UNKNOWN |
References
Related
veracode
veracode
Token Leakage
2019-01-15 08:59:05
ubuntu
ubuntu
OpenStack Ceilometer vulnerability
2014-08-21 00:00:00
OpenStack Neutron vulnerabilities
2014-08-21 00:00:00
openvas
openvas
Fedora Update for python-pycadf FEDORA-2014-7780
2014-07-15 00:00:00
Ubuntu: Security Advisory (USN-2311-1)
2014-08-12 00:00:00
Fedora Update for openstack-ceilometer FEDORA-2014-7799
2014-07-15 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : pyCADF vulnerability (USN-2311-1)
2014-08-12 00:00:00
Fedora 20 : openstack-ceilometer-2013.2.3-2.fc20 (2014-7799)
2014-07-08 00:00:00
Ubuntu 14.04 LTS : OpenStack Ceilometer vulnerability (USN-2311-2)
2014-08-22 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-ceilometer-2013.2.3-2.fc20
2014-07-08 01:03:05
[SECURITY] Fedora 20 Update: python-pycadf-0.5.1-1.fc20
2014-07-08 01:01:17
securityvulns
securityvulns
[USN-2311-2] OpenStack Ceilometer vulnerability
2014-08-24 00:00:00
pyCADF information leakage
2014-08-26 00:00:00
[USN-2311-1] pyCADF vulnerability
2014-08-26 00:00:00
debiancve
debiancve
CVE-2014-4615
2014-08-19 18:55:00
redhat
redhat
(RHSA-2014:1050) Important: openstack-ceilometer security and bug fix update
2014-08-13 00:00:00
ubuntucve
ubuntucve
CVE-2014-4615
2014-06-24 00:00:00
prion
prion
Xxe
2014-08-19 18:55:00
cve
cve
CVE-2014-4615
2014-08-19 18:55:00
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.006 Low
EPSS
Percentile
79.1%
Related for USN-2311-1