Red Hat Security Advisory

RHSA-2014:0941

openstack-swift security update

Released 2014-07-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-swift-1.13.1-3.el7ost, openstack-swift-account-1.13.1-3.el7ost, openstack-swift-container-1.13.1-3.el7ost +5

Fixes 1 record

TI-2014-02824 CVE-2014-3497 · GHSA-66vj-393f-hxfv

Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows…

LOW 24

Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0211 Published 2014-07-03 Fixed in 2.0.0 CWE-79