Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| apache-libcloud(PyPI) | 0.12.3 | 0.13.3 | N/A |
CVSS Metrics
