Detections
Analytics

SCA: security update for swift (GHSA-274c-rx2j-2v3x)

medium Tenable Cloud Security Plugin ID 421733

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying
 crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from
 the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both
 s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively
 developed). (CVE-2022-47950)

See Also

https://github.com/advisories/GHSA-274c-rx2j-2v3x

Plugin Details

Severity: Medium

ID: 421733

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 3/28/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.51

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:N/A:N

CVSS Score Source: CVE-2022-47950

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/18/2023

Vulnerability Publication Date: 1/18/2023

Reference Information

CVE: CVE-2022-47950