Lucene search

RedhatCVELIST:CVE-2021-3585

HistoryAug 26, 2022 - 3:25 p.m.

CVE-2021-3585

2022-08-2615:25:41

CWE-200

redhat

www.cve.org

openstack

tripleo

heat-templates

plain passwords

logs

osp13

deployment

subscription-manager

EPSS

0.001

Percentile

19.4%

JSON

A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.

CNA Affected

[
  {
    "product": "openstack/tripleo-heat-templates.",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in openstack-tripleo-heat-templates-8.4.1"
      }
    ]
  }
]

References

access.redhat.com/security/cve/CVE-2021-3585

bugs.launchpad.net/tripleo/+bug/1931132

bugzilla.redhat.com/show_bug.cgi?id=1961709

bugzilla.redhat.com/show_bug.cgi?id=1968247

review.opendev.org/c/openstack/tripleo-heat-templates/+/791988

EPSS

0.001

Percentile

19.4%

JSON

Related for CVELIST:CVE-2021-3585