CVE-2016-9590

Name of the Vulnerable Software and Affected Versions puppet-swift versions prior to 8.2.1 puppet-swift versions prior to 9.4.4

Description The issue concerns an information-disclosure problem in Red Hat OpenStack Platform director's installation of Object Storage (swift). It occurs because the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions.

Recommendations For versions prior to 8.2.1, update to version 8.2.1 or later. For versions prior to 9.4.4, update to version 9.4.4 or later.