CVE-2022-0718

Katalog CVE

CVSS 4.9 · Medium EPSS 1,7%

Kerentanan Insufficiently Protected Credentials pada openstack oslo.utils, redhat openshift container platform +2 lainnya. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

Rincian

Terbit di NVD

29 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials
CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 77,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://opendev.org/openstack/oslo.utils/commit/6e17ae1f7959c64dfd20a5f67edf422e702426aa patch · advisory vendor
• https://bugs.launchpad.net/oslo.utils/+bug/1949623 exploit · issue tracking · patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2056850 issue tracking · patch · advisory pihak ketiga
• https://security-tracker.debian.org/tracker/CVE-2022-0718 patch · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2022-0718 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/09/msg00015.html mailing list · advisory pihak ketiga