CVE-2017-8761

  • Last update: May 9, 2024

Description

In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.

Software From Fixed in
openstack / swift - 2.10.1.x
openstack / swift 2.11.0 2.13.0.x
openstack / swift 2.14.0 2.14.0.x
swift - 2.15.2

Details

CVSS v3

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs