python-oslo-utils has improper password parsing
Moderate severity
GitHub Reviewed
Published
Aug 29, 2022
to the GitHub Advisory Database
•
Updated Jul 21, 2023
Description
Published by the National Vulnerability Database
Aug 29, 2022
Published to the GitHub Advisory Database
Aug 29, 2022
Reviewed
Sep 16, 2022
Last updated
Jul 21, 2023
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext
References