CVE-2022-3261

A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack overcloud update run, leading to a disclosure of sensitive information problem.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2023-09-15

Last modified

2024-09-25

Weaknesses

CWE-256, CWE-319

Affected products

• Openstack (Redhat)
• Openstack Platform (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2022-3261
• https://bugzilla.redhat.com/show_bug.cgi?id=2128834