CVE-2022-3261CWE-256

Plain-text passwords saved in /var/log/messages

Medium · published September 15, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack overcloud update run, leading to a disclosure of sensitive information problem.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00292 · 20.6th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2023-09-15T20:20Z
EPSS history
Timeline
  • 15 SEP 20:20Z
    Plain-text passwords saved in /var/log/messages
    cvelistv5