CVE-2014-0006: Openstack Swift

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.

Affected products

• Openstack Swift: version 1.4.6 only; version 1.4.7 only; version 1.4.8 only; version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; …

Published 2014-01-23. Last modified 2026-06-17.