Description
A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack overcloud update run, leading to a disclosure of sensitive information problem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | openstack | — | — |
| Red Hat | Red Hat OpenStack Platform 16.2 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | openstack | No fix yet | — |
Advisories 1
- WID-SEC-2023-2376 Red Hat OpenStack: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 17, 2023
References
- https://access.redhat.com/security/cve/CVE-2022-3261 vdb-entry
- RHBZ#2128834 issue-tracking