CVE-2022-0718

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522CWE-532

Affected software

VendorProductVersions
n/aopenstack/python-oslo.utilsAffects all versions, Fixed in 4.10.1, 4.12.1.

References

Timeline

Published
Aug 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-07195.4Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.CVE-2022-07205.4The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any customer to update othCVE-2022-07216.5Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.CVE-2022-07227.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.CVE-2022-07235.4Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.CVE-2022-07246.5Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.CVE-2022-07257.5A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information ExpoCVE-2022-07265.4Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07275.4Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.CVE-2022-07284.8The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege userCVE-2022-07298.8Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.CVE-2022-07309.8Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
CVE-2022-0718: Medium severity, CVSS 4.9 | Vulnix