Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:swift:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductSwift (5dc1ce05-a111-5bf8-8530-0b40ddbcf26d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/swift purl2cpe 2026-06-01 10:17:03.719028
pkg:deb/ubuntu/swift purl2cpe 2026-06-01 10:17:03.719030
pkg:github/openstack/swift purl2cpe 2026-06-01 10:17:03.719031

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1840 not_vulnerable 2026-06-03 14:32:52.070493 Details available
The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image.
Published: 2013-03-22T21:00:00.000Z
Updated: 2024-08-06T15:13:33.277Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.