Search/CVE-2013-6384

● CVE

CVE-2013-6384

(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file.

View graph Watch Export

CVSS v3.1

—

EPSS

0.41%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

2 relationships

Timeline

disclosure → media coverage

Nov 23, 2013

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026