CVE

Id
61953  
CVE No.
CVE-2013-2006  
Status
Candidate  
Description
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620300 61953 CVE-2013-2006 MLIST:[oss-security] 20130423 CVE-2013-2006 OpenStack keystone LDAP password disclosure in log files  View
620301 61953 CVE-2013-2006 URL:http://www.openwall.com/lists/oss-security/2013/04/24/1  View
620302 61953 CVE-2013-2006 MLIST:[oss-security] 20130424 Re: CVE-2013-2006 OpenStack keystone LDAP password disclosure in log files  View
620303 61953 CVE-2013-2006 URL:http://www.openwall.com/lists/oss-security/2013/04/24/2  View
620304 61953 CVE-2013-2006 CONFIRM:https://bugs.launchpad.net/keystone/+bug/1172195  View
620305 61953 CVE-2013-2006 CONFIRM:https://bugs.launchpad.net/ossn/+bug/1168252  View
620306 61953 CVE-2013-2006 CONFIRM:https://github.com/openstack/keystone/commit/c5037dd6b82909efaaa8720e8cfa8bdb8b4a0edd  View
620307 61953 CVE-2013-2006 FEDORA:FEDORA-2013-8023  View
620308 61953 CVE-2013-2006 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.html  View
620309 61953 CVE-2013-2006 FEDORA:FEDORA-2013-8048  View
620310 61953 CVE-2013-2006 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html  View
620311 61953 CVE-2013-2006 REDHAT:RHSA-2013:0806  View
620312 61953 CVE-2013-2006 URL:http://rhn.redhat.com/errata/RHSA-2013-0806.html  View
620313 61953 CVE-2013-2006 BID:59411  View

Related JVN