Patchwire CVEs, their patch status, and feeds to follow them

CVE-2013-6384

Fixed in a distro release EPSS <1%

(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file.

Published 2013-11-23 · CVE record · OSV

Products: openstack ceilometer

Distro releases

ReleasePackageFixed in
Debian 12ceilometer2013.2-4
Debian 13ceilometer2013.2-4
Debian 14ceilometer2013.2-4