CVE-2013-0212
Published Feb 24, 2013
Last updated 2 years ago
Overview
- Description
- store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Evaluator
- Comment
- Per http://www.ubuntu.com/usn/usn-1710-1/ A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 11.10
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD405A64-CF2D-46A0-B19F-5633E0DE1427"
},
{
"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "936ABA46-0574-4A7F-A11D-193B32747A90"
},
{
"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E022F41C-3239-4663-9129-E8A871EA5B77"
},
{
"criteria": "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09ACB383-AA30-4E23-A85E-A68E0A72B596"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4174F4F-149E-41A6-BBCC-D01114C05F38"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5D324C4-97C7-49D3-A809-9EAD4B690C69"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE"
}
],
"operator": "OR"
}
]
}
]