CVE-2019-3866CWE-732
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable
Medium · published November 8, 2019
What it is
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information.
The record
Technical detail
- CVSS v3.0
- 5.9 · MEDIUM
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00339 · 26.1th percentile
- Weakness
- CWE-732 · Incorrect Permission Assignment for Critical Resource
- Published
- 2019-11-08T14:45Z
EPSS history
Timeline