CVE-2013-0212

store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2013-0209.htmlVendor Advisory
• http://secunia.com/advisories/51957Vendor Advisory
• http://secunia.com/advisories/51990Vendor Advisory
• http://ubuntu.com/usn/usn-1710-1Patch
• http://www.openwall.com/lists/oss-security/2013/01/29/10
• https://bugs.launchpad.net/glance/+bug/1098962
• https://bugzilla.redhat.com/show_bug.cgi?id=902964Patch
• https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7
• https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1
• https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89
• https://launchpad.net/glance/+milestone/2012.2.3
• https://lists.launchpad.net/openstack/msg20517.html
• http://rhn.redhat.com/errata/RHSA-2013-0209.htmlVendor Advisory
• http://secunia.com/advisories/51957Vendor Advisory
• http://secunia.com/advisories/51990Vendor Advisory
• http://ubuntu.com/usn/usn-1710-1Patch
• http://www.openwall.com/lists/oss-security/2013/01/29/10
• https://bugs.launchpad.net/glance/+bug/1098962
• https://bugzilla.redhat.com/show_bug.cgi?id=902964Patch
• https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7
• https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1
• https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89
• https://launchpad.net/glance/+milestone/2012.2.3
• https://lists.launchpad.net/openstack/msg20517.html

Published

Feb 24, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0206Unrestricted file upload vulnerability in the Live CSS modul…
• CVE-2013-0207Cross-site request forgery (CSRF) vulnerability in the Mark …
• CVE-2013-0208The boot-from-volume feature in OpenStack Compute (Nova) Fol…
• CVE-2013-0209lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and…
• CVE-2013-0210The smart proxy Puppet run API in Foreman before 1.2.0 allow…
• CVE-2013-0211Integer signedness error in the archive_write_zip_data funct…
• CVE-2013-0213The Samba Web Administration Tool (SWAT) in Samba 3.x before…
• CVE-2013-0214Cross-site request forgery (CSRF) vulnerability in the Samba…
• CVE-2013-0215oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does no…
• CVE-2013-0216The Xen netback functionality in the Linux kernel before 3.7…
• CVE-2013-0217Memory leak in drivers/net/xen-netback/netback.c in the Xen …
• CVE-2013-0218The GUI installer in JBoss Enterprise Application Platform (…