~ / search / GHSA-wmqq-r32m-87c5

GHSA-wmqq-r32m-87c5

python-oslo-utils has improper password parsing

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0718

Packages

EcosystemPackageAffectedFixed in
PyPI oslo-utils < 4.10.1 4.10.1

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext

References

External links from the advisory. They lead to third-party sites.