Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-3646
HistoryMay 12, 2015 - 12:00 a.m.

CVE-2015-3646

2015-05-1200:00:00
ubuntu.com
ubuntu.com
14

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.001

Percentile

43.7%

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4
logs the backend_argument configuration option content, which allows remote
authenticated users to obtain passwords and other sensitive backend
information by reading the Keystone logs.

Bugs

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.001

Percentile

43.7%