Red Hat Security Advisory

RHSA-2014:0232

openstack-swift security update

Released 2014-03-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-swift-1.10.0-3.el6ost, openstack-swift-account-1.10.0-3.el6ost, openstack-swift-container-1.10.0-3.el6ost +3

Fixes 1 record

TI-2014-00006 CVE-2014-0006 · GHSA-cf9m-q836-vf26

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0…

LOW 24

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0192 Published 2014-01-23 Fixed in 1.12.0 CWE-200