CVE-2018-16849: Infoleak
First published: Fri Nov 02 2018(Updated: )
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Openstack-mistral | <7.0.1 | |
| pip/mistral | <7.0.1 | 7.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugs.launchpad.net/mistral/+bug/1783708
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16849
- https://nvd.nist.gov/vuln/detail/CVE-2018-16849
- https://github.com/openstack/mistral/commit/c93b45a61f49d4633f76d8e117cd89063e7759c4
- https://github.com/advisories/GHSA-fqw7-c6vr-q29m (Advisory)
- https://github.com/openstack/mistral/commit/2309e5265a1d5f28480ae872817b5de05f66e83c
- https://github.com/pypa/advisory-database/tree/main/vulns/mistral/PYSEC-2018-92.yaml
Frequently Asked Questions
What is the severity of CVE-2018-16849?
The severity of CVE-2018-16849 is high.
What is the affected software of CVE-2018-16849?
The affected software of CVE-2018-16849 is Redhat Openstack-mistral version up to exclusive 7.0.1.
How can CVE-2018-16849 be exploited?
CVE-2018-16849 can be exploited by manipulating the SSH private key filename to disclose arbitrary files within the filesystem of the executor running the action.
Are there any references for CVE-2018-16849?
Yes, here are the references for CVE-2018-16849: [1] https://bugs.launchpad.net/mistral/+bug/1783708 [2] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16849
What is the CWE of CVE-2018-16849?
The CWE of CVE-2018-16849 is CWE-200.
- collector/nvd-index
- agent/type
- agent/references
- agent/weakness
- agent/description
- agent/author
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/github-advisory
- source/GitHub
- alias/GHSA-fqw7-c6vr-q29m
- alias/CVE-2018-16849
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/event
- agent/first-publish-date
- collector/github-advisory-latest
- vendor/redhat
- canonical/redhat openstack-mistral
- package-manager/pip