CVE-2018-16856CWE-532

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and…

Medium · published March 26, 2019

CVSS v3.0
5.5
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00885 · 58.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2019-03-26T17:45Z
EPSS history
Timeline
  • 26 MAR 17:45Z
    In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and…
    cvelistv5