In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16856.json"
[
{
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.2-5"
}
]
},
{
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "3.0.1-0.20181009115732"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14"
}
]
}
]