OpenStack Object Storage (Swift) - Remote Secret URL Disclosure
Summary
CVE-2014-0006: The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack... Affects swift versions < 1.11.0-2. Fixed in 1.11.0-2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenStack Object Storage (Swift) is a scalable, distributed storage system designed to store and retrieve large amounts of unstructured data. It provides a simple and scalable storage solution for objects and files, with support for features like replication, versioning, and access control. However, a vulnerability in versions 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 of Swift allows remote attackers to obtain secret URLs through a timing side-channel attack.
Vulnerability Detail
The vulnerability, identified as CVE-2014-0006, resides in the TempURL middleware of OpenStack Object Storage. By leveraging an object name and exploiting a timing side-channel attack, an attacker can obtain secret URLs. These secret URLs can grant unauthorized access to objects stored in Swift. This vulnerability poses a risk to the confidentiality and integrity of sensitive data stored in the system.
How To Fix
Minimum fixed version
1.11.0-2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade swiftTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the official fix by upgrading to a patched version of Swift.
Conclusion
The vulnerability in OpenStack Object Storage (Swift) allows remote attackers to obtain secret URLs through a timing side-channel attack. To mitigate this vulnerability, it is crucial to upgrade to version 1.11.0-2 or later. Failure to address this issue can result in unauthorized access to sensitive data stored in the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for swift →
FAQ
OpenStack Object Storage (Swift) is a distributed storage system designed for storing and retrieving large amounts of unstructured data. It provides a scalable and reliable solution for object and file storage.
A timing side-channel attack is a type of attack that exploits variations in the timing of a system's operations to gain information about the system's internal state. In the case of this vulnerability, an attacker can use timing information to deduce secret URLs.
Secret URLs in OpenStack Object Storage are URLs that grant temporary access to specific objects stored in the system. These URLs are typically used for sharing objects with limited access and have an expiration time.
This vulnerability can lead to unauthorized access to sensitive data stored in OpenStack Object Storage. Attackers can obtain secret URLs and access objects that should be restricted. This can result in data breaches, unauthorized modifications, and other security incidents.
No, there is no known workaround for this vulnerability. It is necessary to apply the official fix by upgrading to a patched version of Swift.
Related vulnerabilities
Recent vulnerabilities recorded for swift.
