A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "4.10.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.12.0"
},
{
"introduced": "0"
},
{
"last_affected": "4.0"
},
{
"introduced": "0"
},
{
"last_affected": "10.0"
}
]
}