Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-G892-9H8M-R69R
HistoryMay 14, 2022 - 2:54 a.m.

Libcloud does not properly scrub data when destroying a DigitalOcean node

2022-05-1402:54:05
CWE-200
GitHub Advisory Database
github.com
7

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.

Affected configurations

Vulners
Node
apachelibcloudRange≤0.13.2
CPENameOperatorVersion
apache-libcloudle0.13.2

Related

openvas 6
securityvulns 2
prion 1
fedora 3
nvd 1
cve 1
debiancve 1
osv 2
cvelist 1
nessus 4
seebug 1
openvas
openvas
Fedora Update for python-libcloud FEDORA-2014-0159
2014-01-13 00:00:00
Fedora Update for python-libcloud FEDORA-2014-0136
2014-01-13 00:00:00
Fedora Update for python-libcloud FEDORA-2014-0129
2014-02-03 00:00:00
securityvulns
securityvulns
[CVE-2013-6480] Libcloud doesn't send scrub_data query parameter when destroying a DigitalOcean node
2014-01-08 00:00:00
Apache libcloud pritection bypass
2014-01-08 00:00:00
prion
prion
Design/Logic Flaw
2014-01-07 18:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-libcloud-0.13.3-1.fc20
2014-01-12 05:04:53
[SECURITY] Fedora 18 Update: python-libcloud-0.13.3-1.fc18
2014-01-12 05:03:50
[SECURITY] Fedora 19 Update: python-libcloud-0.13.3-1.fc19
2014-01-12 05:01:43
nvd
nvd
CVE-2013-6480
2014-01-07 18:55:07
cve
cve
CVE-2013-6480
2014-01-07 18:55:07
debiancve
debiancve
CVE-2013-6480
2014-01-07 18:55:07
osv
osv
Libcloud does not properly scrub data when destroying a DigitalOcean node
2022-05-14 02:54:05
PYSEC-2014-97
2014-01-07 18:55:00
cvelist
cvelist
CVE-2013-6480
2014-01-07 18:00:00
nessus
nessus
openSUSE Security Update : python-apache-libcloud (openSUSE-SU-2014:0198-1)
2014-06-13 00:00:00
Fedora 20 : python-libcloud-0.13.3-1.fc20 (2014-0129)
2014-01-13 00:00:00
Fedora 19 : python-libcloud-0.13.3-1.fc19 (2014-0136)
2014-01-13 00:00:00
seebug
seebug
Apache Libcloud Digital Ocean API本地信息泄露漏洞
2014-01-03 00:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON
Related for GHSA-G892-9H8M-R69R
openvas6securityvulns2prion1fedora3nvd1cve1debiancve1osv2cvelist1nessus4seebug1