Bugs : OpenStack Security Advisory

OpenStack Security Advisory

Undecided

Won't Fix

#1202785 Authentication is not checked before sending potentially large request bodies

OpenStack Security Advisory 48

Undecided

Won't Fix

#1319751 qpid debug logging includes sensitive information

OpenStack Security Advisory 256

Undecided

Won't Fix

#1327019 OpenStack shell print credentials by default in debug mode

OpenStack Security Advisory 6

Undecided

Won't Fix

#1328488 oslo apiclient logs sensitive data

OpenStack Security Advisory 6

Undecided

Won't Fix

#1371355 Keystone client logs x-subject-token at the debug log level

OpenStack Security Advisory 14

Undecided

Won't Fix

#1398670 Ceilometer logs contain snmp password in plain text

OpenStack Security Advisory 6

Undecided

Won't Fix

#1425206 Setting debug mode also causes Pecan to run in debug mode

OpenStack Security Advisory 264

Undecided

Won't Fix

#1451931 ironic password config not marked as secret

OpenStack Security Advisory 18

Undecided

Won't Fix

#1465922 Password visible in clear text in keystone.log when user created and keystone debug logging is enabled

OpenStack Security Advisory 6

Undecided

Won't Fix

#1506419 Running Flask server in debug mode may be a security issue

OpenStack Security Advisory 6

Undecided

Won't Fix

#1517277 Clean steps don't actually run (CVE-2015-7514)

OpenStack Security Advisory 12

Undecided

Won't Fix

#1524675 lbaasv2-agent is logging credentials from barbican

OpenStack Security Advisory 256

Undecided

Won't Fix

#1549547 LBaaS leaking password in DEBUG logs

OpenStack Security Advisory 8

Undecided

Won't Fix

#1549981 LBaaS Netscaler driver leaks password in DEBUG mode

OpenStack Security Advisory 8

Undecided

Won't Fix

#1630822 Debug and -vv outputs user password in plain text

OpenStack Security Advisory 10

Undecided

Won't Fix

#1634907 Auth password is being printed to logs in opendaylight client

OpenStack Security Advisory 6

Undecided

Won't Fix

#1664723 replication_slave user and passwords exposed in logging

OpenStack Security Advisory 8

Undecided

Won't Fix

#1674954 trove log-enable causes unnecessary file permission change

OpenStack Security Advisory 8

Undecided

Won't Fix

#1735724 Metadata iptables rules never inserted upon exception on router creation

OpenStack Security Advisory 270

Undecided

Won't Fix

#1736674 sg rules are sometimes not applied

OpenStack Security Advisory 8

Undecided

Won't Fix

#1750074 Cinder logs rabbitmq password on connection log

OpenStack Security Advisory 6

Undecided

Won't Fix

#1752792 Iptables can allow open access to instances in certain situations

OpenStack Security Advisory 16

Undecided

Won't Fix

#1765834 Need to verify content of v4-signed PUTs

OpenStack Security Advisory 10

Undecided

Won't Fix

#1816727 nova-novncproxy does not handle TCP RST cleanly when using SSL

OpenStack Security Advisory 14

Undecided

Won't Fix

#1818239 scheduler: build failure high negative weighting

OpenStack Security Advisory 22

Undecided

Won't Fix

#1849624 ceph backend, secret key leak

OpenStack Security Advisory 8

Undecided

Won't Fix

#1919357 "Secure live migration with QEMU-native TLS in nova"-guide misses essential config option

OpenStack Security Advisory 10

Undecided

Won't Fix

#1934917 inconsistencies in OVS firewall on an agent restart

OpenStack Security Advisory 10

Undecided

Won't Fix

#1977516 When using v3oidcpassword auth and --debug, user password is logged in clear text

OpenStack Security Advisory 8

Undecided

Won't Fix

#2003179 [Dell PowerFlex] [scaleio]: password appears in plain text when creating a volume from an image

OpenStack Security Advisory 8

Undecided

Won't Fix

#2012993 Unredacted X-Auth-Token logged at level DEBUG in nova-api when HTTP status code != 2xx

OpenStack Security Advisory 8

Undecided

Won't Fix

#2040966 hitachi and OEM : output REST API token

OpenStack Security Advisory 6

Report a bug

Bug supervisor:: OpenStack Vulnerability Management team