CVE-2015-9543

An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0

published February 19, 2020

CVSS
—
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.2th percentile
Published
2020-02-19T02:11Z
EPSS history
Timeline
  • 19 FEB 02:11Z
    An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0
    cvelistv5