CVE-2015-8466 Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header.
HighCVSS 7.4
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject fedora | = 23 | No fix listed |
| OpenStack swift3 | <= 1.8 | No fix listed |
References
- FEDORA-2015-1ca595f821 patch vendor-advisory
- DSA-3583 vendor-advisory
- bugs.launchpad.net
- github.com patch
- swiftstack.com