Summary
It was discovered that Glance_store incorrectly handled logging when the
DEBUG log level is enabled. A local attacker could use this issue to obtain
access_key values.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | python-glance-store | 2.0.0-0ubuntu4.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | python-glance-store | 3.0.0-0ubuntu1.4 |
Vulnerabilities 1
-
Medium 5.5
Glance-store: glance store access key logged in debug log level
A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.
References
-
report
https://ubuntu.com/security/CVE-2024-1141