title: Glance-store: glance store access key logged in debug log level
description: A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.
problem types: Logging of Excessive Data
affected:
{
product: upstream
vendor: n/a
defaultStatus: affected
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: python-glance-store
defaultStatus: unknown
cpes: cpe:/a:redhat:openstack:16.1
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: python-glance-store
defaultStatus: unknown
cpes: cpe:/a:redhat:openstack:16.2
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: python-glance-store
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:17.1
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]
workarounds: Avoid leaving the DEBUG log level enabled in critical environments.