REDHAT-BUG-1968247: Medium severity red hat dnf plugin subscription manager vulnerability
Plain password from RHSM in the logs during OSP13 deployment with subscription-manager. overcloudinstall.log contains a plaintext password after overcloud creation. See https://bugzilla.redhat.com/showbug.cgi?id=1961709
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1968247?
The severity of REDHAT-BUG-1968247 is considered moderate due to the exposure of plaintext passwords in logs.
How do I fix REDHAT-BUG-1968247?
To fix REDHAT-BUG-1968247, avoid logging sensitive information and review configuration settings for your logging level.
What are the affected products by REDHAT-BUG-1968247?
The affected products for REDHAT-BUG-1968247 include Red Hat Subscription Manager and Red Hat OpenStack Platform 13.
When was the REDHAT-BUG-1968247 vulnerability reported?
The REDHAT-BUG-1968247 vulnerability was reported as part of the OSP13 deployment process.
What impact does REDHAT-BUG-1968247 have on security?
The impact of REDHAT-BUG-1968247 on security is significant as it could lead to unauthorized access if the plaintext passwords are exposed.