CVE-2018-16856

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2019-03-26

Last modified

2024-08-05

Weaknesses

CWE-532

Affected products

• Octavia (Openstack)
• Openstack (Redhat)
• Openstack-octavia (Unknown)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16856