| Package | Affected versions | Patched versions |
|---|---|---|
| swift | ≥ 1.11.0, < 1.12.0≥ 1.4.6, ≤ 1.8.0≥ 1.4.6, < 1.12.0≥ 1.9.0, ≤ 1.10.0 | 1.12.0 |
| swift | = 1.10.0= 1.11.0= 1.4.6= 1.4.7= 1.4.8= 1.5.0= 1.6.0= 1.7.0= 1.7.2= 1.7.4= 1.7.5= 1.7.6= 1.8.0= 1.9.0= 1.9.1= 1.9.2 |
The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free