CVE

Id
60159  
CVE No.
CVE-2013-0212  
Status
Candidate  
Description
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint"s user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607206 60159 CVE-2013-0212 MLIST:[openstack] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)  View
607207 60159 CVE-2013-0212 URL:https://lists.launchpad.net/openstack/msg20517.html  View
607208 60159 CVE-2013-0212 MLIST:[oss-security] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)  View
607209 60159 CVE-2013-0212 URL:http://www.openwall.com/lists/oss-security/2013/01/29/10  View
607210 60159 CVE-2013-0212 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=902964  View
607211 60159 CVE-2013-0212 CONFIRM:https://bugs.launchpad.net/glance/+bug/1098962  View
607212 60159 CVE-2013-0212 CONFIRM:https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7  View
607213 60159 CVE-2013-0212 CONFIRM:https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1  View
607214 60159 CVE-2013-0212 CONFIRM:https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89  View
607215 60159 CVE-2013-0212 CONFIRM:https://launchpad.net/glance/+milestone/2012.2.3  View
607216 60159 CVE-2013-0212 REDHAT:RHSA-2013:0209  View
607217 60159 CVE-2013-0212 URL:http://rhn.redhat.com/errata/RHSA-2013-0209.html  View
607218 60159 CVE-2013-0212 UBUNTU:USN-1710-1  View
607219 60159 CVE-2013-0212 URL:http://ubuntu.com/usn/usn-1710-1  View
607220 60159 CVE-2013-0212 SECUNIA:51957  View
607221 60159 CVE-2013-0212 URL:http://secunia.com/advisories/51957  View
607222 60159 CVE-2013-0212 SECUNIA:51990  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20023 JVNDB-2013-001598 Linux Kernel の Xen netback 機能におけるサービス運用妨害 (メモリ消費) の脆弱性 Linux Kernel の Xen netback 機能の drivers/net/xen-netback/netback.c には、メモリリークにより、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2013-0217 60159 5.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001598.html  View