CVE-2018-16849
published 2018-11-02CVE-2018-16849: A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files…
PriorityP343high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
1.52%
71.7th percentile
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mistral | < mistral 7.0.0-2 (bookworm) | mistral 7.0.0-2 (bookworm) |
| redhat | openstack-mistral | < 7.0.1 | 7.0.1 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
vendor_ubuntu6.5MEDIUM
vendor_debian3.1LOW
vendor_redhat3.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Mistral vulnerabilities
vendor_ubuntu·2025-04-28·CVSS 6.5
CVE-2019-3866 [MEDIUM] Mistral vulnerabilities
Title: Mistral vulnerabilities
Summary: Several security issues were fixed in Mistral.
It was discovered that Mistral incorrectly handled nested anchors in YAML
files. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848)
Pierre Gaxatte discovered that Mistral incorrectly handled erroneous SSH
private key filename commands. An attacker could possibly use this issue to
expose sensitive information. (CVE-2018-16849)
It was discovered that Mistral incorrectly handled the permissions of
sensitive log files. An attacker could possibly use this issue to expose
sensitive information. This issue only affected Ubuntu 18.04 LTS.
(CVE-2019-3866)
Instructions: In general, a standard system update will make all the neces
Red Hat
openstack-mistral: std.ssh action may disclose presence of arbitrary files
vendor_redhat·2018-11-02·CVSS 3.1
CVE-2018-16849 [LOW] CWE-200 openstack-mistral: std.ssh action may disclose presence of arbitrary files
openstack-mistral: std.ssh action may disclose presence of arbitrary files
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
An information-disclosure flaw was discovered in openstack-mistral, where the SSH private key filename of a std.ssh action could be manipulated. The flaw could be exploited to determine the presence of a file path on the host executing the std.ssh action, based on the returned error message.
Package: openstack-mistral (Red Hat OpenStack Platform 14 (Rocky)
Debian
CVE-2018-16849: mistral - A flaw was found in openstack-mistral. By manipulating the SSH private key filen...
vendor_debian·2018·CVSS 3.1
CVE-2018-16849 [LOW] CVE-2018-16849: mistral - A flaw was found in openstack-mistral. By manipulating the SSH private key filen...
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
Scope: local
bookworm: resolved (fixed in 7.0.0-2)
bullseye: resolved (fixed in 7.0.0-2)
forky: resolved (fixed in 7.0.0-2)
sid: resolved (fixed in 7.0.0-2)
trixie: resolved (fixed in 7.0.0-2)
OSV
mistral, python-mistral-lib vulnerabilities
osv·2025-04-28·CVSS 6.5
CVE-2018-16848 [MEDIUM] mistral, python-mistral-lib vulnerabilities
mistral, python-mistral-lib vulnerabilities
It was discovered that Mistral incorrectly handled nested anchors in YAML
files. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848)
Pierre Gaxatte discovered that Mistral incorrectly handled erroneous SSH
private key filename commands. An attacker could possibly use this issue to
expose sensitive information. (CVE-2018-16849)
It was discovered that Mistral incorrectly handled the permissions of
sensitive log files. An attacker could possibly use this issue to expose
sensitive information. This issue only affected Ubuntu 18.04 LTS.
(CVE-2019-3866)
OSV
openstack-mistral Discloses the presence of arbitrary files within the filesystem
osv·2022-05-13
CVE-2018-16849 [HIGH] openstack-mistral Discloses the presence of arbitrary files within the filesystem
openstack-mistral Discloses the presence of arbitrary files within the filesystem
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
GHSA
openstack-mistral Discloses the presence of arbitrary files within the filesystem
ghsa·2022-05-13
CVE-2018-16849 [HIGH] CWE-200 openstack-mistral Discloses the presence of arbitrary files within the filesystem
openstack-mistral Discloses the presence of arbitrary files within the filesystem
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
OSV
CVE-2018-16849: A flaw was found in openstack-mistral
osv·2018-11-02·CVSS 7.5
CVE-2018-16849 [HIGH] CVE-2018-16849: A flaw was found in openstack-mistral
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
No detection rules found.
No public exploits indexed.
2018-11-02
Published