mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-11 16:47:12 +02:00
21 lines
822 B
Markdown
21 lines
822 B
Markdown
### [CVE-2013-2006](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2006)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- https://bugs.launchpad.net/ossn/+bug/1168252
|
|
|
|
#### Github
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/CVEDB/PoC-List
|
|
- https://github.com/CVEDB/awesome-cve-repo
|
|
- https://github.com/LogSec/CVE-2013-2006
|
|
|