GHSA-8fxc-qm65-vpxgLow

Temporary urls leaked via logging

Published
June 8, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

📋 Description

In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.

🎯 Affected products1

  • pip/swift:< 2.15.2

🔗 References (4)