Kurz gesagt
- CVE-2013-2006 ist eine Schwachstelle (NIEDRIG (CVSS 2.1)) in keystone, keystone (openstack).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.61%, höher als bei 49.0% aller Schwachstellen.
- Abhilfe: auf 8.0.0a0 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| keystone PyPI | < 8.0.0a0all versions
| 8.0.0a0
|
| keystone | = 2013.1.1
| No fix yet |
Description
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.
NVD description
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free