GHSA-qcj3-h27m-mp9xHighCVSS 7.5

Openstack Octavia allows Insertion of Sensitive Information into Log File

Published
May 13, 2022
Last Modified
October 7, 2024

🔗 CVE IDs covered (1)

CVE-2018-16856 →

📋 Description

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.

🎯 Affected products2

  • pip/octavia:< 2.1.0
  • pip/octavia:>= 3.0.0.0b1, < 3.1.0

🔗 References (6)