CVE-2013-0212
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 3.0%
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.
Productos afectados
n/a · n/aReferencias
http://rhn.redhat.com/errata/RHSA-2013-0209.htmlhttps://bugs.launchpad.net/glance/+bug/1098962https://bugzilla.redhat.com/show_bug.cgi?id=902964http://secunia.com/advisories/51957http://secunia.com/advisories/51990https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89https://launchpad.net/glance/+milestone/2012.2.3https://lists.launchpad.net/openstack/msg20517.htmlhttp://ubuntu.com/usn/usn-1710-1http://www.openwall.com/lists/oss-security/2013/01/29/10