← CVE Intelligence

CVE-2024-4840

Rhosp-director: cleartext passwords exposed in logs PUBLISHED

Description (CNA)

An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP environment. Plaintext passwords may be stored in log files, which can expose sensitive information to anyone with access to the logs.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedunaffected 14.3.1-17.1.20240528170747.e7c7ce3.el9ost
Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 9unaffected 0:14.3.1-17.1.20240919130756.el9ost before *
Red Hat / Red Hat OpenStack Platform 16.2affected

CWE

CWE-312

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.