CVE-2013-6384

Publication date 23 November 2013

Last updated 24 July 2024

Description

(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
ceilometer	14.04 LTS trusty	Not in release
	13.10 saucy	Not affected
	13.04 raring	Ignored end of life
	12.10 quantal	Ignored end of life
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release