NVD

Id
36568  
Name
CVE-2013-0212  
Description
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint"s user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-02-24  
Modified Date
2015-02-09  
Seq
2013-0212  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186799 36568 CVE-2013-0212 RHSA-2013:0209  View
186800 36568 CVE-2013-0212 USN-1710-1  View
186801 36568 CVE-2013-0212 [oss-security] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)  View
186802 36568 CVE-2013-0212 https://bugs.launchpad.net/glance/+bug/1098962  View
186803 36568 CVE-2013-0212 https://bugzilla.redhat.com/show_bug.cgi?id=902964  View
186804 36568 CVE-2013-0212 https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7  View
186805 36568 CVE-2013-0212 https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1  View
186806 36568 CVE-2013-0212 https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89  View
186807 36568 CVE-2013-0212 https://launchpad.net/glance/+milestone/2012.2.3  View
186808 36568 CVE-2013-0212 [openstack] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20110 JVNDB-2013-001685 複数の OpenStack 製品の store/swift.py における重要な情報を取得される脆弱性 OpenStack Glance Essex、Folsom、および Grizzly は、Swift シングルテナントモードで、エンドポイントの設定が誤っている、または使用できない場合に、Swift エンドポイントのユーザ名およびパスワードを平文で記録するため、重要な情報を取得される脆弱性が存在します。 CVE-2013-0212 60154 CVE-2013-0212 36568 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001685.html 2013-01-29 2013-02-27 View