PT-2014-5360 · Openstack+1 · Openstack Swift+1

CVE-2014-3497 · Publicado 2014-06-20 · Atualizado 2026-07-06

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Swift versions 1.11.0 through 1.13.1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.

Recommendations For versions 1.11.0 through 1.13.1, update to a version outside of this range to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-3497

GHSA-66VJ-393F-HXFV

PYSEC-2026-928

RHSA-2014:0941

USN-2256-1

Produtos afetados

Openstack Swift

Ubuntu

Referências · 25

• http://secunia.com/advisories/59532 · Nota
• https://review.openstack.org/#/c/101032 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3497 · Nota de Segurança
• http://securityfocus.com/bid/68116 · Nota
• https://osv.dev/vulnerability/GHSA-66vj-393f-hxfv · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2026-928 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2256-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/06/19/10 · Nota
• https://web.archive.org/web/20200229060002/http://securityfocus.com/bid/68116 · Nota
• https://review.openstack.org/#/c/101031 · Nota
• https://osv.dev/vulnerability/CVE-2014-3497 · Aviso do Fabricante
• https://github.com/advisories/GHSA-66vj-393f-hxfv · Nota
• https://ubuntu.com/security/CVE-2014-3497 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3497 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2014:0941 · Nota