Lucene search

Ubuntu.comUB:CVE-2021-3585

HistoryAug 26, 2022 - 12:00 a.m.

CVE-2021-3585

2022-08-2600:00:00

ubuntu.com

openstack

tripleo

heat templates

plain passwords

logs

osp13 deployment

subscription manager

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

19.4%

JSON

A flaw was found in openstack-tripleo-heat-templates. Plain passwords from
RHSM exist in the logs during OSP13 deployment with subscription-manager.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchtripleo-heat-templates< anyUNKNOWN
ubuntu16.04noarchtripleo-heat-templates< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	tripleo-heat-templates	< any	UNKNOWN
ubuntu	16.04	noarch	tripleo-heat-templates	< any	UNKNOWN

References

bugzilla.redhat.com/show_bug.cgi?id=1968247

launchpad.net/bugs/cve/CVE-2021-3585

nvd.nist.gov/vuln/detail/CVE-2021-3585

security-tracker.debian.org/tracker/CVE-2021-3585

www.cve.org/CVERecord?id=CVE-2021-3585

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

19.4%

JSON

Related for UB:CVE-2021-3585