Red Hat Security Advisory

RHSA-2019:0567

openstack-octavia security and bug fix update

Released 2019-03-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 openstack-octavia-2.0.3-2.el7ost, openstack-octavia-amphora-agent-2.0.3-2.el7ost, openstack-octavia-api-2.0.3-2.el7ost +7

Fixes 1 record

TI-2018-12066 CVE-2018-16856 · GHSA-qcj3-h27m-mp9x

Sensitive information in log files in [UNKNOWN] openstack-octavia

LOW 34

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00878 Published 2019-03-26 Partial fix · 2.1.0, 3.1.0 CWE-532