CVE-2017-8761
openstack-swift: logs valid temporary urls which could result in access to data by anyone with access to the logfiles
In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.
CVSS 3.1 · 4.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products