OpenStack Nova can leak consoleauth token into log files

BASSO 3.3CVE-2015-9543 · GHSA-22jm-4hxw-35jf · PYSEC-2026-857 · Published 19/02/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
nova PyPI	`≥ 19.0.0, < 19.1.0≥ 20.0.0, < 20.1.0< 18.2.4`	`19.1.020.1.018.2.4`
nova openstack	`≥ 19.0.0, < 19.1.0≥ 20.0.0, < 20.1.0< 18.2.4`	`19.1.020.1.018.2.4`

Description

An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.

NVD description

An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.

References

nvd.nist.gov/vuln/detail/CVE-2015-9543 · ADVISORY
openstack/nova commit 08f1f91 · WEB
openstack/nova commit 26d4047 · WEB
openstack/nova commit d8fbf04 · WEB
launchpad.net/bugs/1492140 · WEB
review.opendev.org/220622 · WEB
security.openstack.org/ossa/OSSA-2020-001.html · WEB
openwall.com/lists/oss-security/2020/02/19/2 · WEB
pypi.org/project/nova · PACKAGE
GitHub Advisory GHSA-22jm-4hxw-35jf · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nova

PyPI

≥ 19.0.0, < 19.1.0≥ 20.0.0, < 20.1.0< 18.2.4

19.1.020.1.018.2.4

nova

openstack

≥ 19.0.0, < 19.1.0≥ 20.0.0, < 20.1.0< 18.2.4

19.1.020.1.018.2.4

Description

NVD description

An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.