CVE-2014-0006

Published: Jan 23, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.

Affected (16)

Products: Openstack: Swift

Openstack

1 product

Swift

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Openstack Swift	Version 1.10.0
Openstack Swift	Version 1.11.0
Openstack Swift	Version 1.4.6
Openstack Swift	Version 1.4.7
Openstack Swift	Version 1.4.8
Openstack Swift	Version 1.5.0
Openstack Swift	Version 1.6.0
Openstack Swift	Version 1.7.0
Openstack Swift	Version 1.7.2
Openstack Swift	Version 1.7.4
Openstack Swift	Version 1.7.5
Openstack Swift	Version 1.7.6
Openstack Swift	Version 1.8.0
Openstack Swift	Version 1.9.0
Openstack Swift	Version 1.9.1
Openstack Swift	Version 1.9.2