CVE-2017-16613

CVE-2017-16613 describes a critical authentication bypass vulnerability in OpenStack Swauth (through 1.2.0) when integrated with OpenStack Swift (through 2.15.1). The flaw allows unhashed authentication tokens to be logged as part of GET URIs, enabling attackers to extract these tokens from logs and bypass authentication by inserting them into X-Auth-Token headers. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a network-exploitable flaw with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, suggesting awareness and potential for future exploitation.