Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-0718

Опубликовано: 21 фев. 2022
Источник: redhat
CVSS3: 6

Описание

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Container Platform 4python-oslo-utilsAffected
Red Hat OpenStack Platform 13 (Queens)python-oslo-utilsOut of support scope
Red Hat Storage 3python-oslo-utilsAffected
Red Hat OpenStack Platform 16.1python-oslo-utilsFixedRHSA-2022:887307.12.2022
Red Hat OpenStack Platform 16.2python-oslo-utilsFixedRHSA-2022:099323.03.2022

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-532
https://bugzilla.redhat.com/show_bug.cgi?id=2056850python-oslo-utils: incorrect password masking in debug output

6 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.9
ubuntu
больше 3 лет назад

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

CVSS3: 4.9
nvd
больше 3 лет назад

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

CVSS3: 4.9
debian
больше 3 лет назад

A flaw was found in python-oslo-utils. Due to improper parsing, passwo ...

suse-cvrf
7 месяцев назад

Security update for python-oslo.utils

CVSS3: 4.9
github
больше 3 лет назад

python-oslo-utils has improper password parsing

6 Medium

CVSS3