An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.newwebsocketclient in console/websocketproxy.py.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "nova-api": "2:13.1.4-0ubuntu4.5+esm1", "nova-volume": "2:13.1.4-0ubuntu4.5+esm1", "nova-doc": "2:13.1.4-0ubuntu4.5+esm1", "nova-compute-lxc": "2:13.1.4-0ubuntu4.5+esm1", "nova-console": "2:13.1.4-0ubuntu4.5+esm1", "nova-novncproxy": "2:13.1.4-0ubuntu4.5+esm1", "nova-compute-libvirt": "2:13.1.4-0ubuntu4.5+esm1", "nova-compute-qemu": "2:13.1.4-0ubuntu4.5+esm1", "nova-xvpvncproxy": "2:13.1.4-0ubuntu4.5+esm1", "nova-api-os-compute": "2:13.1.4-0ubuntu4.5+esm1", "nova-compute-kvm": "2:13.1.4-0ubuntu4.5+esm1", "nova-ajax-console-proxy": "2:13.1.4-0ubuntu4.5+esm1", "nova-spiceproxy": "2:13.1.4-0ubuntu4.5+esm1", "nova-compute-vmware": "2:13.1.4-0ubuntu4.5+esm1", "nova-compute-xen": "2:13.1.4-0ubuntu4.5+esm1", "nova-network": "2:13.1.4-0ubuntu4.5+esm1", "nova-conductor": "2:13.1.4-0ubuntu4.5+esm1", "nova-compute": "2:13.1.4-0ubuntu4.5+esm1", "nova-cert": "2:13.1.4-0ubuntu4.5+esm1", "python-nova": "2:13.1.4-0ubuntu4.5+esm1", "nova-api-metadata": "2:13.1.4-0ubuntu4.5+esm1", "nova-common": "2:13.1.4-0ubuntu4.5+esm1", "nova-api-os-volume": "2:13.1.4-0ubuntu4.5+esm1", "nova-scheduler": "2:13.1.4-0ubuntu4.5+esm1", "nova-serialproxy": "2:13.1.4-0ubuntu4.5+esm1", "nova-cells": "2:13.1.4-0ubuntu4.5+esm1", "nova-consoleauth": "2:13.1.4-0ubuntu4.5+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "nova-api": "2:17.0.13-0ubuntu5.3", "nova-volume": "2:17.0.13-0ubuntu5.3", "nova-doc": "2:17.0.13-0ubuntu5.3", "nova-compute-lxc": "2:17.0.13-0ubuntu5.3", "nova-console": "2:17.0.13-0ubuntu5.3", "nova-novncproxy": "2:17.0.13-0ubuntu5.3", "nova-compute-libvirt": "2:17.0.13-0ubuntu5.3", "nova-compute-qemu": "2:17.0.13-0ubuntu5.3", "nova-xvpvncproxy": "2:17.0.13-0ubuntu5.3", "nova-api-os-compute": "2:17.0.13-0ubuntu5.3", "nova-compute-kvm": "2:17.0.13-0ubuntu5.3", "nova-ajax-console-proxy": "2:17.0.13-0ubuntu5.3", "nova-spiceproxy": "2:17.0.13-0ubuntu5.3", "nova-compute-vmware": "2:17.0.13-0ubuntu5.3", "nova-compute-xen": "2:17.0.13-0ubuntu5.3", "nova-network": "2:17.0.13-0ubuntu5.3", "nova-conductor": "2:17.0.13-0ubuntu5.3", "nova-compute": "2:17.0.13-0ubuntu5.3", "nova-scheduler": "2:17.0.13-0ubuntu5.3", "python-nova": "2:17.0.13-0ubuntu5.3", "nova-api-metadata": "2:17.0.13-0ubuntu5.3", "nova-common": "2:17.0.13-0ubuntu5.3", "nova-api-os-volume": "2:17.0.13-0ubuntu5.3", "nova-placement-api": "2:17.0.13-0ubuntu5.3", "nova-serialproxy": "2:17.0.13-0ubuntu5.3", "nova-cells": "2:17.0.13-0ubuntu5.3", "nova-consoleauth": "2:17.0.13-0ubuntu5.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "nova-compute-lxc": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-volume": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-doc": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-novncproxy": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-xvpvncproxy": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-api-os-compute": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-compute-kvm": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-ajax-console-proxy": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-spiceproxy": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-compute-vmware": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-compute-xen": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-scheduler": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-conductor": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-compute": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "python3-nova": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-serialproxy": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-api-metadata": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-compute-qemu": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-api": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-api-os-volume": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-common": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-compute-libvirt": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1", "nova-cells": "2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1" } ] }