GitHub Advisoryadvisory · PyPI

GHSA-q45h-chc8-hvp6 OpenStack Object Storage (Swift) Sensitive Data Exposure

MEDIUM Published 2022-05-14 Modified 2023-08-01 Official page ↗
Aliases
CVE-2015-5223
Ecosystem
PyPI
Packages
swift
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2023-08-01

Affected packages

• PyPI swift: < 2.4.0 → fixed in 2.4.0

Description

OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.

Related

Alias · CVE (1)

  • CVE-2015-5223 OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References