National Cyber Awareness System

Vulnerability Summary for CVE-2013-0212

Overview

store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.

Description

Per http://www.ubuntu.com/usn/usn-1710-1/ A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 11.10

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MISC

Name: https://bugzilla.redhat.com/show_bug.cgi?id=902964

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=902964

External Source: UBUNTU

Name: USN-1710-1

Type: Patch Information

Hyperlink:http://ubuntu.com/usn/usn-1710-1

External Source: MLIST

Name: [openstack] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)

Hyperlink:https://lists.launchpad.net/openstack/msg20517.html

External Source: CONFIRM

Name: https://launchpad.net/glance/+milestone/2012.2.3

Hyperlink:https://launchpad.net/glance/+milestone/2012.2.3

External Source: CONFIRM

Name: https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89

Hyperlink:https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89

External Source: CONFIRM

Name: https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1

Hyperlink:https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1

External Source: CONFIRM

Name: https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7

Hyperlink:https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7

External Source: CONFIRM

Name: https://bugs.launchpad.net/glance/+bug/1098962

Hyperlink:https://bugs.launchpad.net/glance/+bug/1098962

External Source: MLIST

Name: [oss-security] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)

Hyperlink:http://www.openwall.com/lists/oss-security/2013/01/29/10

External Source: SECUNIA

Name: 51990

Type: Advisory

Hyperlink:http://secunia.com/advisories/51990

External Source: SECUNIA

Name: 51957

Type: Advisory

Hyperlink:http://secunia.com/advisories/51957

External Source: REDHAT

Name: RHSA-2013:0209

Type: Advisory

Hyperlink:http://rhn.redhat.com/errata/RHSA-2013-0209.html