| Package | Affected versions | Patched versions |
|---|---|---|
| puppet-swift | ≥ 8.0.0, < 8.2.1≥ 9.0.0, < 9.4.4 | 8.2.19.4.4 |
| openstack | = 10= 8= 9 |
puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free