En bref
- CVE-2019-3830 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant ceilometer, ceilometer (openstack), openstack (redhat).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.39%, plus élevée que 33.1% des vulnérabilités.
- Correctif : mettre à jour vers 12.0.0.0rc1 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| ceilometer PyPI | < 12.0.0.0rc1
| 12.0.0.0rc1
|
| ceilometer | ≥ 2013.1, ≤ 2015.1.4≤ 11.01
| No fix yet |
| openstack | = 10
| No fix yet |
Description
A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.
NVD description
A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free