Unscored severity · published Feb 24, 2013
CVE-2013-0212
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password…
–
CVSS
3%
EPSS
No
On KEV
Description
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IR
Image Registry And Delivery Service (glance) · Openstack
2012.1; 2012.2; 2012.2.1; 2012.2.2 · source: NVD
UL
Ubuntu Linux · Canonical
11.10; 12.04; 12.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0212
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0212
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0209.html
Vendor Advisory
http://secunia.com/advisories/51957
Vendor Advisory
http://secunia.com/advisories/51990
Patch
http://ubuntu.com/usn/usn-1710-1
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/01/29/10
bugs.launchpad.net
https://bugs.launchpad.net/glance/+bug/1098962
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation