Temporary urls leaked via logging
Low severity
GitHub Reviewed
Published
Jun 8, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Jun 2, 2021
Reviewed
Jun 3, 2021
Published to the GitHub Advisory Database
Jun 8, 2021
Last updated
Feb 1, 2023
In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.
References