REDHAT-BUG-1434844: Medium severity openstack compute (nova) vulnerability
An issue was discovered in exceptionwrapper.py in OpenStack Nova. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.
Upstream bug:
https://bugs.launchpad.net/nova/+bug/1673569
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1434844?
The severity of REDHAT-BUG-1434844 is high due to the potential exposure of sensitive information in logs.
How do I fix REDHAT-BUG-1434844?
To fix REDHAT-BUG-1434844, ensure that logging configurations do not include sensitive information and upgrade to the latest secure version of OpenStack Nova.
What type of sensitive information is exposed in REDHAT-BUG-1434844?
REDHAT-BUG-1434844 may expose sensitive information such as account passwords and authorization tokens in ERROR level logs.
Which software is affected by REDHAT-BUG-1434844?
The affected software for REDHAT-BUG-1434844 is OpenStack Nova.
When should I be concerned about REDHAT-BUG-1434844?
You should be concerned about REDHAT-BUG-1434844 if you are managing OpenStack Nova and need to protect sensitive data from being logged.