PT-2013-3501

CVE-2013-2006

Publicado

2013-05-21

Atualizado

2022-05-17

Descrição por

CVSS 2.0

2.1

Baixa

MétricasAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Identity (Keystone) version 2013.1.1

Description The issue allows local users to obtain sensitive information by reading the log file when DEBUG mode logging is enabled. Specifically, it logs the admin token and LDAP password in plaintext.

Recommendations For OpenStack Identity (Keystone) version 2013.1.1, consider disabling DEBUG mode logging to prevent sensitive information from being logged in plaintext. As a temporary workaround, restrict access to the log file to minimize the risk of exploitation.

Explorabilidade

Correção

Impactos

Pesquisadores

Kseifried

Kurt Seifried

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Identificadores relacionados

CVE-2013-2006