p PatchFirst

CVE-2017-8761

CVE-2017-8761

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.

CVSS 4.3 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • swift Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.17.0-2

    Update to 2.17.0-2

  • swift Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.17.0-2

    Update to 2.17.0-2

  • swift Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.17.0-2

    Update to 2.17.0-2

  • swift PyPI

    Versions
    • 1.0.2
    Affected ranges
    • ECOSYSTEM: < 2.15.2

    Update to 2.15.2

  • swift Ubuntu:16.04:LTS

    Versions
    • 2.5.0-0ubuntu1
    • 2.7.0-0ubuntu2
    • 2.7.0-0ubuntu2.1
    • 2.7.1-0ubuntu1
    • 2.7.1-0ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swift Ubuntu:18.04:LTS

    Versions
    • 2.15.1-0ubuntu3
    • 2.16.0-0ubuntu1
    • 2.16.0-0ubuntu2
    • 2.17.0-0ubuntu1
    • 2.17.1-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swift Ubuntu:20.04:LTS

    Versions
    • 2.23.0-0ubuntu1
    • 2.23.1-0ubuntu1
    • 2.24.0~git2019121715.e890b0f0f-0ubuntu1
    • 2.24.0-0ubuntu1
    • 2.24.1~git2020032711.712bf3c9f-0ubuntu2
    • 2.24.1~git2020041316.a495f1e32-0ubuntu1
    • 2.25.0-0ubuntu0.20.04.1
    • 2.25.1-0ubuntu1
    • 2.25.2-0ubuntu1
    • 2.25.2-0ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →