CVE-2015-9543 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-9543 Interim 1 19 2023-02-10T02:42:04Z current 2021-05-30T13:36:43Z 2023-02-10T02:42:04Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-9543 An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 HPE Helion OpenStack Cloud 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openstack-nova openstack-nova-api openstack-nova-cells openstack-nova-compute openstack-nova-conductor openstack-nova-console openstack-nova-consoleauth openstack-nova-novncproxy openstack-nova-placement-api openstack-nova-scheduler openstack-nova-serialproxy openstack-nova-vncproxy python-nova openstack-nova as a component of HPE Helion OpenStack 8 openstack-nova-api as a component of HPE Helion OpenStack 8 openstack-nova-cells as a component of HPE Helion OpenStack 8 openstack-nova-compute as a component of HPE Helion OpenStack 8 openstack-nova-conductor as a component of HPE Helion OpenStack 8 openstack-nova-console as a component of HPE Helion OpenStack 8 openstack-nova-consoleauth as a component of HPE Helion OpenStack 8 openstack-nova-novncproxy as a component of HPE Helion OpenStack 8 openstack-nova-placement-api as a component of HPE Helion OpenStack 8 openstack-nova-scheduler as a component of HPE Helion OpenStack 8 openstack-nova-serialproxy as a component of HPE Helion OpenStack 8 openstack-nova-vncproxy as a component of HPE Helion OpenStack 8 python-nova as a component of HPE Helion OpenStack 8 openstack-nova as a component of HPE Helion OpenStack Cloud 8 openstack-nova as a component of SUSE OpenStack Cloud 8 openstack-nova-api as a component of SUSE OpenStack Cloud 8 openstack-nova-cells as a component of SUSE OpenStack Cloud 8 openstack-nova-compute as a component of SUSE OpenStack Cloud 8 openstack-nova-conductor as a component of SUSE OpenStack Cloud 8 openstack-nova-console as a component of SUSE OpenStack Cloud 8 openstack-nova-consoleauth as a component of SUSE OpenStack Cloud 8 openstack-nova-novncproxy as a component of SUSE OpenStack Cloud 8 openstack-nova-placement-api as a component of SUSE OpenStack Cloud 8 openstack-nova-scheduler as a component of SUSE OpenStack Cloud 8 openstack-nova-serialproxy as a component of SUSE OpenStack Cloud 8 openstack-nova-vncproxy as a component of SUSE OpenStack Cloud 8 python-nova as a component of SUSE OpenStack Cloud 8 openstack-nova as a component of SUSE OpenStack Cloud 9 openstack-nova-api as a component of SUSE OpenStack Cloud 9 openstack-nova-cells as a component of SUSE OpenStack Cloud 9 openstack-nova-compute as a component of SUSE OpenStack Cloud 9 openstack-nova-conductor as a component of SUSE OpenStack Cloud 9 openstack-nova-console as a component of SUSE OpenStack Cloud 9 openstack-nova-novncproxy as a component of SUSE OpenStack Cloud 9 openstack-nova-placement-api as a component of SUSE OpenStack Cloud 9 openstack-nova-scheduler as a component of SUSE OpenStack Cloud 9 openstack-nova-serialproxy as a component of SUSE OpenStack Cloud 9 openstack-nova-vncproxy as a component of SUSE OpenStack Cloud 9 python-nova as a component of SUSE OpenStack Cloud 9 openstack-nova as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-api as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-cells as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-compute as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-conductor as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-console as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-consoleauth as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-novncproxy as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-placement-api as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-scheduler as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-serialproxy as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova-vncproxy as a component of SUSE OpenStack Cloud Crowbar 8 python-nova as a component of SUSE OpenStack Cloud Crowbar 8 openstack-nova as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-api as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-cells as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-compute as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-conductor as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-console as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-novncproxy as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-placement-api as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-scheduler as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-serialproxy as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-vncproxy as a component of SUSE OpenStack Cloud Crowbar 9 python-nova as a component of SUSE OpenStack Cloud Crowbar 9 An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py. CVE-2015-9543 HPE Helion OpenStack 8:openstack-nova HPE Helion OpenStack 8:openstack-nova-api HPE Helion OpenStack 8:openstack-nova-cells HPE Helion OpenStack 8:openstack-nova-compute HPE Helion OpenStack 8:openstack-nova-conductor HPE Helion OpenStack 8:openstack-nova-console HPE Helion OpenStack 8:openstack-nova-consoleauth HPE Helion OpenStack 8:openstack-nova-novncproxy HPE Helion OpenStack 8:openstack-nova-placement-api HPE Helion OpenStack 8:openstack-nova-scheduler HPE Helion OpenStack 8:openstack-nova-serialproxy HPE Helion OpenStack 8:openstack-nova-vncproxy HPE Helion OpenStack 8:python-nova HPE Helion OpenStack Cloud 8:openstack-nova SUSE OpenStack Cloud 8:openstack-nova SUSE OpenStack Cloud 8:openstack-nova-api SUSE OpenStack Cloud 8:openstack-nova-cells SUSE OpenStack Cloud 8:openstack-nova-compute SUSE OpenStack Cloud 8:openstack-nova-conductor SUSE OpenStack Cloud 8:openstack-nova-console SUSE OpenStack Cloud 8:openstack-nova-consoleauth SUSE OpenStack Cloud 8:openstack-nova-novncproxy SUSE OpenStack Cloud 8:openstack-nova-placement-api SUSE OpenStack Cloud 8:openstack-nova-scheduler SUSE OpenStack Cloud 8:openstack-nova-serialproxy SUSE OpenStack Cloud 8:openstack-nova-vncproxy SUSE OpenStack Cloud 8:python-nova SUSE OpenStack Cloud 9:openstack-nova SUSE OpenStack Cloud 9:openstack-nova-api SUSE OpenStack Cloud 9:openstack-nova-cells SUSE OpenStack Cloud 9:openstack-nova-compute SUSE OpenStack Cloud 9:openstack-nova-conductor SUSE OpenStack Cloud 9:openstack-nova-console SUSE OpenStack Cloud 9:openstack-nova-novncproxy SUSE OpenStack Cloud 9:openstack-nova-placement-api SUSE OpenStack Cloud 9:openstack-nova-scheduler SUSE OpenStack Cloud 9:openstack-nova-serialproxy SUSE OpenStack Cloud 9:openstack-nova-vncproxy SUSE OpenStack Cloud 9:python-nova SUSE OpenStack Cloud Crowbar 8:openstack-nova SUSE OpenStack Cloud Crowbar 8:openstack-nova-api SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor SUSE OpenStack Cloud Crowbar 8:openstack-nova-console SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy SUSE OpenStack Cloud Crowbar 8:python-nova SUSE OpenStack Cloud Crowbar 9:openstack-nova SUSE OpenStack Cloud Crowbar 9:openstack-nova-api SUSE OpenStack Cloud Crowbar 9:openstack-nova-cells SUSE OpenStack Cloud Crowbar 9:openstack-nova-compute SUSE OpenStack Cloud Crowbar 9:openstack-nova-conductor SUSE OpenStack Cloud Crowbar 9:openstack-nova-console SUSE OpenStack Cloud Crowbar 9:openstack-nova-novncproxy SUSE OpenStack Cloud Crowbar 9:openstack-nova-placement-api SUSE OpenStack Cloud Crowbar 9:openstack-nova-scheduler SUSE OpenStack Cloud Crowbar 9:openstack-nova-serialproxy SUSE OpenStack Cloud Crowbar 9:openstack-nova-vncproxy SUSE OpenStack Cloud Crowbar 9:python-nova moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L