CVE-2018-16856 in OpenStack and Red Hat Products
Published on March 26, 2019
In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.
Weakness Type
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
Products Associated with CVE-2018-16856
stack.watch emails you whenever new vulnerabilities are published in OpenStack Octavia or Red Hat Openstack. Just hit a watch button to start following.
Affected Versions
[UNKNOWN] openstack-octavia:- Version 2.0.2-5 is affected.
- Version openstack-octavia-3.0.1-0.20181009115732 is affected.
Exploit Probability
EPSS
0.89%
Percentile
56.93%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.