CVE-2013-0212

Related Files

Red Hat Security Advisory 2013-0209-01

Posted Jan 31, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0209-01 - These packages provide a service that acts as a registry for virtual machine images. It was found that when the OpenStack Glance front-end communicated with an OpenStack Swift endpoint, the operator credentials could be logged in plain text when certain errors occurred during new image creation. An authenticated user could use this flaw to gain administrative access to an OpenStack Swift endpoint. This issue was discovered by Dan Prince of Red Hat.

tags | advisory, registry

systems | linux, redhat

advisories | CVE-2013-0212

SHA-256 | ba4d3ac81d1773f1bd03e0efea6e41920e0db7f02055379d11726b0c89f6dae9

Download | Favorite | View

Ubuntu Security Notice USN-1710-1

Posted Jan 30, 2013

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1710-1 - Dan Prince discovered an issue in Glance error reporting. An authenticated attacker could exploit this to expose the Glance operator's Swift credentials for a misconfigured or otherwise unusable Swift endpoint.

tags | advisory

systems | linux, ubuntu

advisories | CVE-2013-0212

SHA-256 | a8a09ccaeac158a8d29c02bde4efb94e0ca13120c3c4459c94dc77cda6d548ad

Download | Favorite | View