Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-4840

Rhosp-director: cleartext passwords exposed in logs

Description

An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP environment. Plaintext passwords may be stored in log files, which can expose sensitive information to anyone with access to the logs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openstack-tripleo-heat-templates

  • 14.3.1-17.1.20240528170747.e7c7ce3.el9ostunaffected

Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9

Default version status: affected

  • 0:14.3.1-17.1.20240919130756.el9ost to < *unaffected

Red Hat Red Hat OpenStack Platform 16.2

Default version status: affected

References