Glance-store: glance store access key logged in debug log level
A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в python-glance-store опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.
A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.