Lucene search
Veracode Vulnerability DatabaseVERACODE:11171HistoryJan 15, 2019 - 8:57 a.m.
Information Disclosure
2019-01-1508:57:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
openstack-swift is vulnerable to information disclosure attacks. The vulnerability exists as the TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.
Related
cve
cve
CVE-2014-0006
2014-01-23 01:55:00
redhat
redhat
(RHSA-2014:0232) Moderate: openstack-swift security update
2014-03-04 00:00:00
(RHSA-2014:0367) Moderate: openstack-swift security update
2014-04-03 00:00:00
prion
prion
Code injection
2014-01-23 01:55:00
openvas
openvas
Ubuntu Update for swift USN-2207-1
2014-05-12 00:00:00
Ubuntu: Security Advisory (USN-2207-1)
2014-05-12 00:00:00
github
github
OpenStack Swift Discloses Secret URLs to Timing Attack
2022-05-17 04:50:15
debiancve
debiancve
CVE-2014-0006
2014-01-23 01:55:00
ubuntucve
ubuntucve
CVE-2014-0006
2014-01-22 00:00:00
ubuntu
ubuntu
OpenStack Swift vulnerability
2014-05-06 00:00:00
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.10 : swift vulnerability (USN-2207-1)
2014-05-07 00:00:00
osv
osv
OpenStack Swift Discloses Secret URLs to Timing Attack
2022-05-17 04:50:15
securityvulns
securityvulns
[USN-2207-1] OpenStack Swift vulnerability
2014-05-07 00:00:00
OpenStack multiple security vulnerabilities
2014-05-07 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
Related for VERACODE:11171