Sensitive Information Leak

2019-01-1509:15:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

26.7%

JSON

oslo.middleware is vulnerable to sensitive information leaks. This happens when catch errors are thrown, sensitive information such as the authentication token X-Auth-Token which is used to place the rest call to neutron is logged as part of the stack trace.

CPENameOperatorVersion
python-oslo-middlewareeq2.8.0__3.el7ost
python-oslo-middlewareeq1.0.0__2.el7ost
python-oslo-middlewareeq1.0.0__3.el7ost
python-oslo-middlewareeq3.7.0__1.el7ost
python-oslo-middlewareeq3.19.0__1.1.el7ost

Name	Operator	Version
python-oslo-middleware	eq	2.8.0__3.el7ost
python-oslo-middleware	eq	1.0.0__2.el7ost
python-oslo-middleware	eq	1.0.0__3.el7ost
python-oslo-middleware	eq	3.7.0__1.el7ost
python-oslo-middleware	eq	3.19.0__1.1.el7ost