Medium USN-3666-1 1 CVE

python-oslo.middleware vulnerability

Published May 31, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Divya K Konoor discovered Oslo middleware was vulnerable to an information
disclosure. A local attacker could exploit this flaw to obtain sensitive
information from OpenStack component error logs.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	python-oslo.middleware	3.8.0-2ubuntu1

Vulnerabilities 1

Medium 5.9

CVE-2017-2592

oslo.middleware Information Disclosure vulnerability

python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitiv…

oslo-middleware python-oslo.middleware python-oslo.middleware Debian Ubuntu PyPI

May 8, 2018

References

report
https://ubuntu.com/security/CVE-2017-2592
report
https://launchpad.net/bugs/1628031