The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-10-01 13:55
Updated : 2017-09-18 18:36
NVD link : CVE-2013-2013
Mitre link : CVE-2013-2013
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
openstack
- python-keystoneclient