glance: information leak [LWN.net]

Package(s):

glance

CVE #(s):

CVE-2013-0212

Created:

January 30, 2013

Updated:

February 14, 2013

Description:

From the Ubuntu advisory:

Dan Prince discovered an issue in Glance error reporting. An authenticated attacker could exploit this to expose the Glance operator's Swift credentials for a misconfigured or otherwise unusable Swift endpoint.

Alerts:

Ubuntu	USN-1710-1	2013-01-29
Red Hat	RHSA-2013:0209-01	2013-01-30
Fedora	FEDORA-2013-1930	2013-02-14

(Log in to post comments)