In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.
{
"cwe_ids": [
"CWE-117",
"CWE-200"
],
"github_reviewed": true,
"severity": "LOW",
"github_reviewed_at": "2021-06-03T21:08:32Z",
"nvd_published_at": "2021-06-02T14:15:00Z"
}