CVE-2022-0718
Summary
| CVE | CVE-2022-0718 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-08-29 15:15:00 UTC |
|---|
| Updated | 2023-07-21 17:12:00 UTC |
|---|
| Description | A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 2056850 – (CVE-2022-0718) CVE-2022-0718 python-oslo-utils: incorrect password masking in debug output |
MISC |
bugzilla.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Bug #1949623 “mask_passwords doesn't mask characters following a...” : Bugs : oslo.utils |
MISC |
bugs.launchpad.net |
|
| CVE-2022-0718 |
MISC |
security-tracker.debian.org |
|
| [SECURITY] [DLA 3106-1] python-oslo.utils security update |
MLIST |
lists.debian.org |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Fix regex used to mask password · 6e17ae1f79 - oslo.utils - OpenDev: Free Software Needs Free Tools |
MISC |
opendev.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 181050 Debian Security Update for python-oslo.utils (DLA 3106-1)
- 184113 Debian Security Update for python-oslo.utils (CVE-2022-0718)
- 198734 Ubuntu Security Notification for oslo.utils Vulnerability (USN-5369-1)
- 240184 Red Hat Update for OpenStack Platform 16.2 (RHSA-2022:0993)
- 240976 Red Hat Update for OpenStack Platform 16.1.9 (RHSA-2022:8873)
