GitHub Advisoryadvisory · PyPI

GHSA-g892-9h8m-r69r Libcloud does not properly scrub data when destroying a DigitalOcean node

LOW Published 2022-05-14 Modified 2024-09-06 Official page ↗
Aliases
CVE-2013-6480
Ecosystem
PyPI
Packages
apache-libcloud
Severity
Low
Weaknesses
CWE-200
Reviewed
2024-02-23

Affected packages

• PyPI apache-libcloud: >= 0.12.3, < 0.13.3 → fixed in 0.13.3

Description

Libcloud 0.12.3 through 0.13.2 does not set the `scrub_data parameter` for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.

Related

Alias · CVE (1)

  • CVE-2013-6480 Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References