CVE-2013-0212
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.0%
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.
Produtos afetados
n/a · n/aReferências
http://rhn.redhat.com/errata/RHSA-2013-0209.htmlhttps://bugs.launchpad.net/glance/+bug/1098962https://bugzilla.redhat.com/show_bug.cgi?id=902964http://secunia.com/advisories/51957http://secunia.com/advisories/51990https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89https://launchpad.net/glance/+milestone/2012.2.3https://lists.launchpad.net/openstack/msg20517.htmlhttp://ubuntu.com/usn/usn-1710-1http://www.openwall.com/lists/oss-security/2013/01/29/10