Lucene search

K
osvGoogleOSV:GHSA-XCP8-HH74-F6MC
HistoryJul 13, 2018 - 3:16 p.m.

oslo.middleware Information Disclosure vulnerability

2018-07-1315:16:45
Google
osv.dev
8

EPSS

0.001

Percentile

26.5%

python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback’s error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs (for example, keystone tokens).