Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2013-6384

OpenStack: Ceilometer DB2/MongoDB backend password leak

(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Openstack
Products
Ceilometer
CVE-2019-3830

openstack-ceilometer: ceilometer-agent prints sensitive data from config files through log files

A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Ceilometer Openstack