CVEs-PoC/2013/CVE-2013-2006.md

CVE-2013-2006

Description

OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

POC

Reference

• https://bugs.launchpad.net/ossn/+bug/1168252
• https://bugs.launchpad.net/ossn/+bug/1168252

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/LogSec/CVE-2013-2006