An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying     crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from     the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both     s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively     developed). (CVE-2022-47950)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying
    crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from
    the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both
    s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively
    developed). (CVE-2022-47950)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1013 advisory.

    OpenStack Object Storage (swift) aggregates commodity servers to      work together in clusters for reliable, redundant, and large-scale storage     of static objects. Objects are written to multiple hardware devices in the     data center, with the OpenStack software responsible for ensuring data     replication and integrity across the cluster. Storage clusters can scale     horizontally by adding new nodes, which are automatically configured.
    Should a node fail, OpenStack works to replicate its content from other     active nodes. Because OpenStack uses software logic to ensure data     replication and distribution across different devices, inexpensive     commodity hard drives and servers can be used in lieu of more expensive     equipment.

    Security Fix(es):

    * Arbitrary file access through custom S3 XML entities (CVE-2022-47950)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1277 advisory.

    OpenStack Object Storage (swift) aggregates commodity servers to      work together in clusters for reliable, redundant, and large-scale storage     of static objects. Objects are written to multiple hardware devices in the     data center, with the OpenStack software responsible for ensuring data     replication and integrity across the cluster. Storage clusters can scale     horizontally by adding new nodes, which are automatically configured.
    Should a node fail, OpenStack works to replicate its content from other     active nodes. Because OpenStack uses software logic to ensure data     replication and distribution across different devices, inexpensive     commodity hard drives and servers can be used in lieu of more expensive     equipment.

    Security Fix(es):

    * Arbitrary file access through custom S3 XML entities (CVE-2022-47950)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5852-1 advisory.

    It was discovered that OpenStack Swift incorrectly handled certain XML files. A remote authenticated user     could possibly use this issue to obtain arbitrary file contents containing sensitive information from the     server.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5327 advisory.

    Sebastien Meriot discovered that the S3 API of Swift, a distributed virtual object store, was susceptible     to information disclosure. For the stable distribution (bullseye), this problem has been fixed in version     2.26.0-10+deb11u1. We recommend that you upgrade your swift packages. For the detailed security status of     swift please refer to its security tracker page at: https://security-tracker.debian.org/tracker/swift

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3281 advisory.

    - -----------------------------------------------------------------------     Debian LTS Advisory DLA-3281-1              debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Utkarsh Gupta     January 25, 2023                            https://wiki.debian.org/LTS
    - -----------------------------------------------------------------------

    Package        : swift     Version        : 2.19.1-1+deb10u1     CVE ID         : CVE-2022-47950     Debian Bug     : 1029200

    Sebastien Meriot discovered that the S3 API of Swift, a distributed     virtual object store, was susceptible to information disclosure.

    For Debian 10 buster, this problem has been fixed in version     2.19.1-1+deb10u1.

    We recommend that you upgrade your swift packages.

    For the detailed security status of swift please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/swift

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
251678	Linux Distros Unpatched Vulnerability : CVE-2022-47950	Nessus	Misc.	medium
421733	SCA: security update for swift (GHSA-274c-rx2j-2v3x)	Tenable Cloud Security	SCA Checks	medium
421733	SCA: security update for swift (GHSA-274c-rx2j-2v3x)	Tenable Self-Hosted Container Security	SCA Checks	medium
194319	RHEL 9 : Red Hat OpenStack Platform 17.0 (openstack-swift) (RHSA-2023:1013)	Nessus	Red Hat Local Security Checks	medium
194230	RHEL 7 / 8 : Red Hat OpenStack Platform (openstack-swift) (RHSA-2023:1277)	Nessus	Red Hat Local Security Checks	medium
171248	Ubuntu 20.04 LTS / 22.04 LTS : OpenStack Swift vulnerability (USN-5852-1)	Nessus	Ubuntu Local Security Checks	medium
170656	Debian DSA-5327-1 : swift - security update	Nessus	Debian Local Security Checks	medium
170609	Debian dla-3281 : python-swift - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2022-47950

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium