CVE-2014-1948 | BDVDB-2026-59939 Detail

Description#

OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.launchpad.net/glance/+bug/1275062
http://secunia.com/advisories/56419
http://rhn.redhat.com/errata/RHSA-2014-0229.html
http://www.securityfocus.com/bid/65507
http://www.openwall.com/lists/oss-security/2014/02/12/18

Exploit#

No public exploit known

History#

Version 12014-02-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.