Lucene search

K
osvGoogleOSV:CVE-2017-2592
HistoryMay 08, 2018 - 5:29 p.m.

CVE-2017-2592

2018-05-0817:29:00
Google
osv.dev
4

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback’s error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs (for example, keystone tokens).

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%