Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Ceilometer 日志信息泄露漏洞
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。 OpenStack Ceilometer 2013.2及之前的版本中的impl_db2.py和impl_mongodb.py文件中存在日志信息泄露漏洞，该漏洞源于当登录级别设置为INFO时，ceilometer-api日志文件中记录连接字符串。本地攻击者可通过读取日志文件利用该漏洞获取敏感信息（DB2或MongoDB
CVSS Information
N/A
Vulnerability Type
N/A