{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2015-9543","title":"Title"},{"category":"description","text":"An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2015-9543","url":"https://www.suse.com/security/cve/CVE-2015-9543"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1164398 for CVE-2015-9543","url":"https://bugzilla.suse.com/1164398"}],"title":"SUSE CVE CVE-2015-9543","tracking":{"current_release_date":"2025-04-25T09:54:28Z","generator":{"date":"2023-02-15T05:09:59Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2015-9543","initial_release_date":"2023-02-15T05:09:59Z","revision_history":[{"date":"2023-02-15T05:09:59Z","number":"2","summary":"Current version"},{"date":"2025-03-14T05:56:42Z","number":"3","summary":"Current version"},{"date":"2025-03-16T04:22:08Z","number":"4","summary":"Current version"},{"date":"2025-04-25T09:54:28Z","number":"5","summary":"Current version"}],"status":"interim","version":"5"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"HPE Helion OpenStack 8","product":{"name":"HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8","product_identification_helper":{"cpe":"cpe:/o:suse:hpe-helion-openstack:8"}}},{"category":"product_name","name":"HPE Helion OpenStack Cloud 8","product":{"name":"HPE Helion OpenStack Cloud 8","product_id":"HPE Helion OpenStack Cloud 8"}},{"category":"product_name","name":"SUSE OpenStack Cloud 8","product":{"name":"SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud:8"}}},{"category":"product_name","name":"SUSE OpenStack Cloud 9","product":{"name":"SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud:9"}}},{"category":"product_name","name":"SUSE OpenStack Cloud Crowbar 8","product":{"name":"SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud-crowbar:8"}}},{"category":"product_name","name":"SUSE OpenStack Cloud Crowbar 9","product":{"name":"SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9","product_identification_helper":{"cpe":"cpe:/o:suse:suse-openstack-cloud-crowbar:9"}}},{"category":"product_version","name":"openstack-nova","product":{"name":"openstack-nova","product_id":"openstack-nova","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-api","product":{"name":"openstack-nova-api","product_id":"openstack-nova-api","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-api@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-cells","product":{"name":"openstack-nova-cells","product_id":"openstack-nova-cells","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-cells@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-compute","product":{"name":"openstack-nova-compute","product_id":"openstack-nova-compute","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-compute@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-conductor","product":{"name":"openstack-nova-conductor","product_id":"openstack-nova-conductor","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-conductor@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-console","product":{"name":"openstack-nova-console","product_id":"openstack-nova-console","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-console@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-consoleauth","product":{"name":"openstack-nova-consoleauth","product_id":"openstack-nova-consoleauth","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-consoleauth@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-novncproxy","product":{"name":"openstack-nova-novncproxy","product_id":"openstack-nova-novncproxy","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-novncproxy@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-placement-api","product":{"name":"openstack-nova-placement-api","product_id":"openstack-nova-placement-api","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-placement-api@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-scheduler","product":{"name":"openstack-nova-scheduler","product_id":"openstack-nova-scheduler","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-scheduler@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-serialproxy","product":{"name":"openstack-nova-serialproxy","product_id":"openstack-nova-serialproxy","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-serialproxy@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"openstack-nova-vncproxy","product":{"name":"openstack-nova-vncproxy","product_id":"openstack-nova-vncproxy","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openstack-nova-vncproxy@?upstream=openstack-nova.src.rpm"}}},{"category":"product_version","name":"python-nova","product":{"name":"python-nova","product_id":"python-nova","product_identification_helper":{"cpe":"cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/python-nova@?upstream=openstack-nova.src.rpm"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"openstack-nova as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova"},"product_reference":"openstack-nova","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-api as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-api"},"product_reference":"openstack-nova-api","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-cells as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-cells"},"product_reference":"openstack-nova-cells","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-compute as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-compute"},"product_reference":"openstack-nova-compute","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-conductor as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-conductor"},"product_reference":"openstack-nova-conductor","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-console as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-console"},"product_reference":"openstack-nova-console","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-consoleauth as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-consoleauth"},"product_reference":"openstack-nova-consoleauth","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-novncproxy as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-novncproxy"},"product_reference":"openstack-nova-novncproxy","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-placement-api as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-placement-api"},"product_reference":"openstack-nova-placement-api","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-scheduler as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-scheduler"},"product_reference":"openstack-nova-scheduler","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-serialproxy as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-serialproxy"},"product_reference":"openstack-nova-serialproxy","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-vncproxy as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:openstack-nova-vncproxy"},"product_reference":"openstack-nova-vncproxy","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"python-nova as component of HPE Helion OpenStack 8","product_id":"HPE Helion OpenStack 8:python-nova"},"product_reference":"python-nova","relates_to_product_reference":"HPE Helion OpenStack 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova as component of HPE Helion OpenStack Cloud 8","product_id":"HPE Helion OpenStack Cloud 8:openstack-nova"},"product_reference":"openstack-nova","relates_to_product_reference":"HPE Helion OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova"},"product_reference":"openstack-nova","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-api as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-api"},"product_reference":"openstack-nova-api","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-cells as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-cells"},"product_reference":"openstack-nova-cells","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-compute as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-compute"},"product_reference":"openstack-nova-compute","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-conductor as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-conductor"},"product_reference":"openstack-nova-conductor","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-console as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-console"},"product_reference":"openstack-nova-console","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-consoleauth as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-consoleauth"},"product_reference":"openstack-nova-consoleauth","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-novncproxy as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-novncproxy"},"product_reference":"openstack-nova-novncproxy","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-placement-api as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-placement-api"},"product_reference":"openstack-nova-placement-api","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-scheduler as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-scheduler"},"product_reference":"openstack-nova-scheduler","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-serialproxy as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-serialproxy"},"product_reference":"openstack-nova-serialproxy","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-vncproxy as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:openstack-nova-vncproxy"},"product_reference":"openstack-nova-vncproxy","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"python-nova as component of SUSE OpenStack Cloud 8","product_id":"SUSE OpenStack Cloud 8:python-nova"},"product_reference":"python-nova","relates_to_product_reference":"SUSE OpenStack Cloud 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova"},"product_reference":"openstack-nova","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-api as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-api"},"product_reference":"openstack-nova-api","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-cells as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-cells"},"product_reference":"openstack-nova-cells","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-compute as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-compute"},"product_reference":"openstack-nova-compute","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-conductor as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-conductor"},"product_reference":"openstack-nova-conductor","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-console as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-console"},"product_reference":"openstack-nova-console","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-novncproxy as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-novncproxy"},"product_reference":"openstack-nova-novncproxy","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-placement-api as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-placement-api"},"product_reference":"openstack-nova-placement-api","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-scheduler as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-scheduler"},"product_reference":"openstack-nova-scheduler","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-serialproxy as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-serialproxy"},"product_reference":"openstack-nova-serialproxy","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-vncproxy as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:openstack-nova-vncproxy"},"product_reference":"openstack-nova-vncproxy","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"python-nova as component of SUSE OpenStack Cloud 9","product_id":"SUSE OpenStack Cloud 9:python-nova"},"product_reference":"python-nova","relates_to_product_reference":"SUSE OpenStack Cloud 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova"},"product_reference":"openstack-nova","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-api as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-api"},"product_reference":"openstack-nova-api","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-cells as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells"},"product_reference":"openstack-nova-cells","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-compute as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute"},"product_reference":"openstack-nova-compute","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-conductor as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor"},"product_reference":"openstack-nova-conductor","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-console as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-console"},"product_reference":"openstack-nova-console","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-consoleauth as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth"},"product_reference":"openstack-nova-consoleauth","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-novncproxy as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy"},"product_reference":"openstack-nova-novncproxy","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-placement-api as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api"},"product_reference":"openstack-nova-placement-api","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-scheduler as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler"},"product_reference":"openstack-nova-scheduler","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-serialproxy as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy"},"product_reference":"openstack-nova-serialproxy","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-vncproxy as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy"},"product_reference":"openstack-nova-vncproxy","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"python-nova as component of SUSE OpenStack Cloud Crowbar 8","product_id":"SUSE OpenStack Cloud Crowbar 8:python-nova"},"product_reference":"python-nova","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 8"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova"},"product_reference":"openstack-nova","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-api as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-api"},"product_reference":"openstack-nova-api","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-cells as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-cells"},"product_reference":"openstack-nova-cells","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-compute as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-compute"},"product_reference":"openstack-nova-compute","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-conductor as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-conductor"},"product_reference":"openstack-nova-conductor","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-console as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-console"},"product_reference":"openstack-nova-console","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-novncproxy as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-novncproxy"},"product_reference":"openstack-nova-novncproxy","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-placement-api as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-placement-api"},"product_reference":"openstack-nova-placement-api","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-scheduler as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-scheduler"},"product_reference":"openstack-nova-scheduler","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-serialproxy as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-serialproxy"},"product_reference":"openstack-nova-serialproxy","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"openstack-nova-vncproxy as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:openstack-nova-vncproxy"},"product_reference":"openstack-nova-vncproxy","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"},{"category":"default_component_of","full_product_name":{"name":"python-nova as component of SUSE OpenStack Cloud Crowbar 9","product_id":"SUSE OpenStack Cloud Crowbar 9:python-nova"},"product_reference":"python-nova","relates_to_product_reference":"SUSE OpenStack Cloud Crowbar 9"}]},"vulnerabilities":[{"cve":"CVE-2015-9543","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2015-9543"}],"notes":[{"category":"general","text":"An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. This is related to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py.","title":"CVE description"}],"product_status":{"known_not_affected":["HPE Helion OpenStack 8:openstack-nova","HPE Helion OpenStack 8:openstack-nova-api","HPE Helion OpenStack 8:openstack-nova-cells","HPE Helion OpenStack 8:openstack-nova-compute","HPE Helion OpenStack 8:openstack-nova-conductor","HPE Helion OpenStack 8:openstack-nova-console","HPE Helion OpenStack 8:openstack-nova-consoleauth","HPE Helion OpenStack 8:openstack-nova-novncproxy","HPE Helion OpenStack 8:openstack-nova-placement-api","HPE Helion OpenStack 8:openstack-nova-scheduler","HPE Helion OpenStack 8:openstack-nova-serialproxy","HPE Helion OpenStack 8:openstack-nova-vncproxy","HPE Helion OpenStack 8:python-nova","HPE Helion OpenStack Cloud 8:openstack-nova","SUSE OpenStack Cloud 8:openstack-nova","SUSE OpenStack Cloud 8:openstack-nova-api","SUSE OpenStack Cloud 8:openstack-nova-cells","SUSE OpenStack Cloud 8:openstack-nova-compute","SUSE OpenStack Cloud 8:openstack-nova-conductor","SUSE OpenStack Cloud 8:openstack-nova-console","SUSE OpenStack Cloud 8:openstack-nova-consoleauth","SUSE OpenStack Cloud 8:openstack-nova-novncproxy","SUSE OpenStack Cloud 8:openstack-nova-placement-api","SUSE OpenStack Cloud 8:openstack-nova-scheduler","SUSE OpenStack Cloud 8:openstack-nova-serialproxy","SUSE OpenStack Cloud 8:openstack-nova-vncproxy","SUSE OpenStack Cloud 8:python-nova","SUSE OpenStack Cloud 9:openstack-nova","SUSE OpenStack Cloud 9:openstack-nova-api","SUSE OpenStack Cloud 9:openstack-nova-cells","SUSE OpenStack Cloud 9:openstack-nova-compute","SUSE OpenStack Cloud 9:openstack-nova-conductor","SUSE OpenStack Cloud 9:openstack-nova-console","SUSE OpenStack Cloud 9:openstack-nova-novncproxy","SUSE OpenStack Cloud 9:openstack-nova-placement-api","SUSE OpenStack Cloud 9:openstack-nova-scheduler","SUSE OpenStack Cloud 9:openstack-nova-serialproxy","SUSE OpenStack Cloud 9:openstack-nova-vncproxy","SUSE OpenStack Cloud 9:python-nova","SUSE OpenStack Cloud Crowbar 8:openstack-nova","SUSE OpenStack Cloud Crowbar 8:openstack-nova-api","SUSE OpenStack Cloud Crowbar 8:openstack-nova-cells","SUSE OpenStack Cloud Crowbar 8:openstack-nova-compute","SUSE OpenStack Cloud Crowbar 8:openstack-nova-conductor","SUSE OpenStack Cloud Crowbar 8:openstack-nova-console","SUSE OpenStack Cloud Crowbar 8:openstack-nova-consoleauth","SUSE OpenStack Cloud Crowbar 8:openstack-nova-novncproxy","SUSE OpenStack Cloud Crowbar 8:openstack-nova-placement-api","SUSE OpenStack Cloud Crowbar 8:openstack-nova-scheduler","SUSE OpenStack Cloud Crowbar 8:openstack-nova-serialproxy","SUSE OpenStack Cloud Crowbar 8:openstack-nova-vncproxy","SUSE OpenStack Cloud Crowbar 8:python-nova","SUSE OpenStack Cloud Crowbar 9:openstack-nova","SUSE OpenStack Cloud Crowbar 9:openstack-nova-api","SUSE OpenStack Cloud Crowbar 9:openstack-nova-cells","SUSE OpenStack Cloud Crowbar 9:openstack-nova-compute","SUSE OpenStack Cloud Crowbar 9:openstack-nova-conductor","SUSE OpenStack Cloud Crowbar 9:openstack-nova-console","SUSE OpenStack Cloud Crowbar 9:openstack-nova-novncproxy","SUSE OpenStack Cloud Crowbar 9:openstack-nova-placement-api","SUSE OpenStack Cloud Crowbar 9:openstack-nova-scheduler","SUSE OpenStack Cloud Crowbar 9:openstack-nova-serialproxy","SUSE OpenStack Cloud Crowbar 9:openstack-nova-vncproxy","SUSE OpenStack Cloud Crowbar 9:python-nova"]},"references":[{"category":"external","summary":"CVE-2015-9543","url":"https://www.suse.com/security/cve/CVE-2015-9543"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1164398 for CVE-2015-9543","url":"https://bugzilla.suse.com/1164398"}],"threats":[{"category":"impact","date":"2020-02-19T14:45:46Z","details":"moderate"}],"title":"CVE-2015-9543"}]}