Skip to content
OpenAdvisories
Critical DSA-4044-1 1 CVE

swauth - security update

Published Nov 21, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 swauth 1.2.0-2+deb9u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2017-16613

    OpenStack Swauth object/proxy server writing Auth Token to log file

    An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved from the Swauth middleware authentication mechanism to a l…

    swauth swauth Ubuntu PyPI