CVE-2022-0718

2022-08-2914:03:04

CWE-522

redhat

www.cve.org

flaw

python-oslo-utils

incorrect masking

debug logs

plaintext password

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

47.0%

JSON

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

CNA Affected

[
  {
    "product": "openstack/python-oslo.utils",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affects all versions, Fixed in 4.10.1, 4.12.1."
      }
    ]
  }
]