The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1277 advisory.

    OpenStack Object Storage (swift) aggregates commodity servers to      work together in clusters for reliable, redundant, and large-scale storage     of static objects. Objects are written to multiple hardware devices in the     data center, with the OpenStack software responsible for ensuring data     replication and integrity across the cluster. Storage clusters can scale     horizontally by adding new nodes, which are automatically configured.
    Should a node fail, OpenStack works to replicate its content from other     active nodes. Because OpenStack uses software logic to ensure data     replication and distribution across different devices, inexpensive     commodity hard drives and servers can be used in lieu of more expensive     equipment.

    Security Fix(es):

    * Arbitrary file access through custom S3 XML entities (CVE-2022-47950)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 / 8 : Red Hat OpenStack Platform (openstack-swift) (RHSA-2023:1277)

medium Nessus Plugin ID 194230

Version 1.2