CVE-2017-2592

Description

python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a tracebacks error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs (for example, keystone tokens).

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.093

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-2592 are fixed in Python-oslo-middleware 3.19.1	Windows
Vulnerabilities CVE-2017-2592 are fixed in Python-oslo-middleware 3.23.1	Windows
Vulnerabilities CVE-2017-2592 are fixed in Python-oslo-middleware 3.8.1	Windows
WSGI middleware components for OpenStack (USN-3666-1) python-oslo.middleware_3.8.0-2ubuntu1_all.deb	Linux
WSGI middleware components for OpenStack (USN-3666-1) python-oslo.middleware-doc_3.8.0-2ubuntu1_all.deb	Linux
Vulnerabilities CVE-2017-2592 are fixed in Python-oslo-middleware for linux 3.19.1	Linux
Vulnerabilities CVE-2017-2592 are fixed in Python-oslo-middleware for linux 3.23.1	Linux
Vulnerabilities CVE-2017-2592 are fixed in Python-oslo-middleware for linux 3.8.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234