PYSEC-2014-116

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/swift/PYSEC-2014-116.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2014-116
Aliases
Published
2014-01-23T01:55:00Z
Modified
2026-07-13T16:15:34.564184864Z
Summary
[none]
Details

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.

References

Affected packages

PyPI / swift

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.4.6
Fixed
1.12.0

Affected versions

1.*
1.11.0

Database specific

source
"https://github.com/pypa/advisory-database/blob/main/vulns/swift/PYSEC-2014-116.yaml"