An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1013 advisory.

    OpenStack Object Storage (swift) aggregates commodity servers to      work together in clusters for reliable, redundant, and large-scale storage     of static objects. Objects are written to multiple hardware devices in the     data center, with the OpenStack software responsible for ensuring data     replication and integrity across the cluster. Storage clusters can scale     horizontally by adding new nodes, which are automatically configured.
    Should a node fail, OpenStack works to replicate its content from other     active nodes. Because OpenStack uses software logic to ensure data     replication and distribution across different devices, inexpensive     commodity hard drives and servers can be used in lieu of more expensive     equipment.

    Security Fix(es):

    * Arbitrary file access through custom S3 XML entities (CVE-2022-47950)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1277 advisory.

    OpenStack Object Storage (swift) aggregates commodity servers to      work together in clusters for reliable, redundant, and large-scale storage     of static objects. Objects are written to multiple hardware devices in the     data center, with the OpenStack software responsible for ensuring data     replication and integrity across the cluster. Storage clusters can scale     horizontally by adding new nodes, which are automatically configured.
    Should a node fail, OpenStack works to replicate its content from other     active nodes. Because OpenStack uses software logic to ensure data     replication and distribution across different devices, inexpensive     commodity hard drives and servers can be used in lieu of more expensive     equipment.

    Security Fix(es):

    * Arbitrary file access through custom S3 XML entities (CVE-2022-47950)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5852-1 advisory.

    It was discovered that OpenStack Swift incorrectly handled certain XML files. A remote authenticated user     could possibly use this issue to obtain arbitrary file contents containing sensitive information from the     server.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5327 advisory.

  - An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying     crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from     the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both     s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively     developed). (CVE-2022-47950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3281 advisory.

  - An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying     crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from     the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both     s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively     developed). (CVE-2022-47950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
194319	RHEL 9 : Red Hat OpenStack Platform 17.0 (openstack-swift) (RHSA-2023:1013)	Nessus	Red Hat Local Security Checks	medium
194230	RHEL 7 / 8 : Red Hat OpenStack Platform (openstack-swift) (RHSA-2023:1277)	Nessus	Red Hat Local Security Checks	medium
171248	Ubuntu 20.04 LTS / 22.04 LTS : OpenStack Swift vulnerability (USN-5852-1)	Nessus	Ubuntu Local Security Checks	medium
170656	Debian DSA-5327-1 : swift - security update	Nessus	Debian Local Security Checks	medium
170609	Debian DLA-3281-1 : swift - LTS security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2022-47950

medium

Tenable Plugins

medium

medium

medium

medium

medium