Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 14.04 LTS USN-2311-2 Moderate: Ceilometer Info Exposure

ubuntu
Calendar Grey August 21, 2014
Scroller Ubuntu
Ubuntu Security Alert USN-2312-3 addresses the Nova issue leaking critical information. Immediate upgrade is advised for protection.
OpenStack Ceilometer could be made to expose sensitive information.

Summary

OpenStack Ceilometer could be made to expose sensitive information.

Software Description:

- ceilometer: OpenStack Telemetry service

Details:

USN-2311-1 fixed vulnerabilities in pyCADF. This update provides the

corresponding updates for OpenStack Ceilometer.

Original advisory details:

Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens.

An attacker could possibly use this issue to obtain authentication tokens

used in REST requests.

Topics%20covered

Topics Covered

security advisory moderate information exposure ubuntu ceilometer telemetry service

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  ceilometer-common               2014.1.2-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2311-2

https://ubuntu.com/security/notices/USN-2311-1

CVE-2014-4615

=========================================================================Ubuntu Security Notice USN-2311-2

Topics%20covered

Topics Covered

security advisory moderate information exposure ubuntu ceilometer telemetry service

Package Information

https://launchpad.net/ubuntu/+source/ceilometer/2014.1.2-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.