Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-4840

Опубликовано: 06 мая 2024
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP environment. Plaintext passwords may be stored in log files, which can expose sensitive information to anyone with access to the logs.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenStack Platform 16.2rhosp-directorWill not fix
Red Hat OpenStack Platform 17.1 for RHEL 9openstack-tripleo-heat-templatesFixedRHSA-2024:997821.11.2024

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-312
https://bugzilla.redhat.com/show_bug.cgi?id=2280249rhosp-director: cleartext passwords exposed in logs

EPSS

Процентиль: 3%
0.00016
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
больше 1 года назад

An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP environment. Plaintext passwords may be stored in log files, which can expose sensitive information to anyone with access to the logs.

CVSS3: 5.5
github
больше 1 года назад

An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP environment. Plaintext passwords may be stored in log files, which can expose sensitive information to anyone with access to the logs.

EPSS

Процентиль: 3%
0.00016
Низкий

5.5 Medium

CVSS3