CVE-2024-4840CWE-312

Rhosp-director: cleartext passwords exposed in logs

Medium · published May 13, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP environment. Plaintext passwords may be stored in log files, which can expose sensitive information to anyone with access to the logs.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2024-05-13T22:16Z
EPSS history
Timeline
  • 13 MAY 22:16Z
    Rhosp-director: cleartext passwords exposed in logs
    cvelistv5