CVE-2017-8761: Infoleak
In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-8761?
CVE-2017-8761 is a vulnerability in OpenStack Swift that can potentially leak reusable tempurl signatures to anyone with read access to the logs.
What is the severity of CVE-2017-8761?
CVE-2017-8761 has a severity score of 4.3, which is considered medium.
How does CVE-2017-8761 affect OpenStack Swift?
CVE-2017-8761 affects OpenStack Swift versions 2.10.1 through 2.13.0 and 2.14.0.
How can the CVE-2017-8761 vulnerability be exploited?
The CVE-2017-8761 vulnerability can be exploited by reading the logs that contain the full tempurl paths.
Is there a fix for CVE-2017-8761?
Yes, a fix for CVE-2017-8761 is available. It is recommended to update to a version of OpenStack Swift that is not affected by the vulnerability.