204 matches found
PYSEC-2022-258
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
PYSEC-2022-258
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
cloudmesh-client (>=4.5.0, <=4.7.3) potentially affected by CVE-2022-0718 via oslo-utils (3.22.0)
oslo-utils PYPI version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 Source cves: CVE-2022-0718 Source advisory: OSV:PYSEC-2022-258...
keystonemiddleware (>=1.5.2, <=1.5.3), networking-ofagent (>=2015.1.5, <=2015.1.6) +15 more potentially affected by CVE-2022-0718 via oslo-utils (1.4.2)
oslo-utils PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - keystonemiddleware =1.5.2, =2015.1.5, =1.8.1, =1.0.14, =1.1.2, =0.14.3, =0.10.0, =0.5.0, =1.3.2, =0.5.8, =2.23.2, =2.23.3 and more Source...
python-cloudkittyclient (>=2.0.0, <=2.0.1) potentially affected by CVE-2022-0718 via oslo-utils (3.42.1)
oslo-utils PYPI version 3.42.1 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - python-cloudkittyclient =2.0.0, =2.0.1 Source cves: CVE-2022-0718 Source advisory: OSV:PYSEC-2022-258...
CVE-2022-0718
The CVE-2022-0718 issue affects python-oslo.utils/oslo.utils where improper parsing causes passwords containing a double quote to be masked incorrectly in debug logs, exposing the portion after the quote. Impact is credential disclosure of sensitive data in logs (confidentiality impact stated by ...
CVE-2022-0718
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
aodhclient (>=0.1.0, <=0.8.0), cloudcix (>=0.2.136, <=0.2.144) +33 more potentially affected by CVE-2022-0718 via oslo-utils (>=1.4.1, <=3.42.1)
oslo-utils PYPI version =1.4.1, =0.1.0, =0.2.136, =4.2.6, =0.2.0, =0.2.0, =2.2.4rc3, =1.3.0, =1.1.20, =11.0.0, =1.0.0, =0.2.0, =0.1.0, =0.2.0, =0.9.0, =0.1.0, =0.1.2 and more Source cves: CVE-2022-0718 Source advisory: MEND:CVE-2022-0718...
CVE-2022-0718
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
CVE-2022-0718
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
CVE-2022-0718
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
CVE-2022-0718: Insufficiently Protected Credentials
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
oslo-bysteinerskole.no Cross Site Scripting vulnerability OBB-2830601
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mageia: Security Advisory (MGASA-2022-0189)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0189 Updated python-oslo-utils packages fix security vulnerability
oslo.utils could be made to expose sensitive information if it received a specially crafted input CVE-2022-0718...
Updated python-oslo-utils packages fix security vulnerability
oslo.utils could be made to expose sensitive information if it received a specially crafted input CVE-2022-0718...
GHSA-V933-VX5P-J7W2 OpenStack Oslo utility sensitive information exposure via log files
The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...
OpenStack Oslo utility sensitive information exposure via log files
The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...
Information Disclosure
python-oslo-utils is vulnerable to information disclosure. The vulnerability exists because improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...
