PT-2020-7914 · Openstack+3 · Openstack Nova+3

Paul Carlton · Published 2020-02-19 · Updated 2024-08-02 · CVE-2015-9543

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: OpenStack Nova versions prior to 18.2.4 OpenStack Nova versions 19.x before 19.1.0 OpenStack Nova versions 20.x before 20.1.0

Description: The issue can leak consoleauth tokens into log files, allowing an attacker with read access to the service's logs to obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to the NovaProxyRequestHandlerBase.new websocket client function in console/websocketproxy.py.

Recommendations: For OpenStack Nova versions prior to 18.2.4, update to version 18.2.4 or later. For OpenStack Nova versions 19.x before 19.1.0, update to version 19.1.0 or later. For OpenStack Nova versions 20.x before 20.1.0, update to version 20.1.0 or later. As a temporary workaround, consider restricting access to the log files to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2024-1074

ALT-PU-2024-9720

CVE-2015-9543

GHSA-22JM-4HXW-35JF

USN-5866-1

Affected Products

Alt Linux

Linuxmint

Openstack Nova

Ubuntu

References · 21

• https://security.openstack.org/ossa/OSSA-2020-001.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-9543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3654 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-17376 · Vendor Advisory
• http://openwall.com/lists/oss-security/2020/02/19/2 · Patch
• https://ubuntu.com/security/notices/USN-5866-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5866-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-9543 · Security Note
• https://osv.dev/vulnerability/GHSA-22jm-4hxw-35jf · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-37394 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-9543 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2015-9543 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-9543 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-9543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18191 · Vendor Advisory