CVE-2022-0718
published 2022-08-29CVE-2022-0718: A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any…
medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | python-oslo.utils | < python-oslo.utils 4.10.1-1 (bookworm) | python-oslo.utils 4.10.1-1 (bookworm) |
| openstack | oslo.utils | < 4.10.1 | 4.10.1 |
| openstack | oslo.utils | — | — |
| openstack | python-oslo.utils | — | — |
| openstack | python-oslo.utils | >= 0 < 4.6.1-0+deb11u1 | 4.6.1-0+deb11u1 |
| openstack | python-oslo.utils | >= 0 < 4.10.1-1 | 4.10.1-1 |
| openstack | python-oslo.utils | >= 0 < 4.10.1-1 | 4.10.1-1 |
| openstack | python-oslo.utils | >= 0 < 4.10.1-1 | 4.10.1-1 |
| redhat | openshift_container_platform | — | — |
| redhat | openstack_platform | — | — |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
osv5.0MEDIUM