CVE-2024-1141

Summary

CVE-2024-1141 is a newly discovered vulnerability affecting the python-glance-store package. When the DEBUG log level is enabled, the package logs the access_key, exposing a potential security risk. An attacker who gains access to the logs could obtain the access_key and use it to unauthorizedly access the glance-store. This issue can lead to data breaches and unintended access, making it crucial for users to disable the DEBUG log level or apply patches as soon as possible. The python-glance-store team is working on releasing a fix for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.