Every CVE Search/ Get API key

CVE-2018-16849

openstack-mistral Discloses the presence of arbitrary files within the filesystem

3.1 LowFix available

CVE-2018-16849 is a low vulnerability (CVSS 3.1) in [unknown] Openstack-mistral, published November 2, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. Fixed in mistral 7.0.1.

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

1.52%Up 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 3.1

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
CVE-2018-16849
CVSS 3.0
3.1 LowCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
EUVDEUVD-2018-0099 3.1

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
EUVD-2018-0099
CVSS 3.0
3.1 LowCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-fqw7-c6vr-q29m 8.7

openstack-mistral Discloses the presence of arbitrary files within the filesystem

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
GHSA-fqw7-c6vr-q29m
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
NVD 3.1

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
CVE-2018-16849
CVSS 3.0
3.1 LowCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSV 7.5

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
CVE-2018-16849
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-16849 7.5

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
DEBIAN-CVE-2018-16849
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 5 moreShow less
OSVGHSA-fqw7-c6vr-q29m 8.7

openstack-mistral Discloses the presence of arbitrary files within the filesystem

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
GHSA-fqw7-c6vr-q29m
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVRHBA-2019:0448 4.3

Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 13.0 director Bug Fix Advisory

Record
RHBA-2019:0448
CVSS 3.0
4.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2018-16849 7.5

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
UBUNTU-CVE-2018-16849
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0
3.1 LowCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVPYSEC-2018-92 No score

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Record
PYSEC-2018-92
Updated
2026-11-02
OSVUSN-7465-1 No score

mistral, python-mistral-lib vulnerabilities

It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848)

Pierre Gaxatte discovered that Mistral incorrectly handled erroneous SSH private key filename commands. An attacker could possibly use this issue to expose sensitive information. (CVE-2018-16849)

It was discovered that Mistral incorrectly handled the permissions of sensitive log files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-3866)

Record
USN-7465-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mistral
PyPI
 before 7.0.1
7.0.1
mistral
Debian:12
 before 7.0.0-2
7.0.0-2
mistral
Debian:13
 before 7.0.0-2
7.0.0-2
mistral
Debian:14
 before 7.0.0-2
7.0.0-2
mistral
PyPI
 before 7.0.1, plus listed versions
0.0.10.0.20.0.30.0.40.1
Show 45 moreShow less
0.1.11.0.01.0.0.0b11.0.0.0b21.0.0.0b31.0.0.0rc11.0.0.0rc21.0.12.0.02.0.0.0b12.0.0.0b22.0.0.0b32.0.0.0rc12.0.0.0rc22.0.0.0rc33.0.0.0b13.0.24.0.04.0.0.0b14.0.0.0b24.0.0.0b34.0.0.0rc14.0.0.0rc24.0.14.0.25.0.05.0.0.0b15.0.0.0b25.0.0.0b35.0.0.0rc15.1.05.2.05.2.15.2.25.2.35.2.45.2.55.2.65.2.75.2.86.0.06.0.0.0b16.0.0.0b26.0.0.0b36.0.0.0rc1
7.0.1
instack-undercloud
Red Hat:openstack:13::el7
 before 0:8.4.6-6.el7ost
0:8.4.6-6.el7ost
openstack-mistral
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
openstack-mistral-all
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
openstack-mistral-api
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
openstack-mistral-common
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
Show 33 moreShow less
Affected packages
PackageAffectedFixed
openstack-mistral-engine
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
openstack-mistral-event-engine
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
openstack-mistral-executor
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
openstack-tripleo-common
Red Hat:openstack:13::el7
 before 0:8.6.6-16.el7ost
0:8.6.6-16.el7ost
openstack-tripleo-common-container-base
Red Hat:openstack:13::el7
 before 0:8.6.6-16.el7ost
0:8.6.6-16.el7ost
openstack-tripleo-common-containers
Red Hat:openstack:13::el7
 before 0:8.6.6-16.el7ost
0:8.6.6-16.el7ost
openstack-tripleo-common-devtools
Red Hat:openstack:13::el7
 before 0:8.6.6-16.el7ost
0:8.6.6-16.el7ost
openstack-tripleo-heat-templates
Red Hat:openstack:13::el7
 before 0:8.2.0-6.1.el7ost
0:8.2.0-6.1.el7ost
openstack-tripleo-image-elements
Red Hat:openstack:13::el7
 before 0:8.0.1-3.el7ost
0:8.0.1-3.el7ost
openstack-tripleo-puppet-elements
Red Hat:openstack:13::el7
 before 0:8.0.1-2.el7ost
0:8.0.1-2.el7ost
openstack-tripleo-ui
Red Hat:openstack:13::el7
 before 0:8.3.2-3.el7ost
0:8.3.2-3.el7ost
openstack-tripleo-validations
Red Hat:openstack:13::el7
 before 0:8.4.4-2.el7ost
0:8.4.4-2.el7ost
os-net-config
Red Hat:openstack:13::el7
 before 0:8.4.3-6.el7ost
0:8.4.3-6.el7ost
os-refresh-config
Red Hat:openstack:13::el7
 before 0:8.3.1-0.20180918214345.4703b54.el7ost
0:8.3.1-0.20180918214345.4703b54.el7ost
puppet-cinder
Red Hat:openstack:13::el7
 before 0:12.4.1-3.el7ost
0:12.4.1-3.el7ost
puppet-keystone
Red Hat:openstack:13::el7
 before 0:12.4.0-4.el7ost
0:12.4.0-4.el7ost
puppet-manila
Red Hat:openstack:13::el7
 before 0:12.5.0-3.el7ost
0:12.5.0-3.el7ost
puppet-neutron
Red Hat:openstack:13::el7
 before 0:12.4.1-4.ed05e01git.el7ost
0:12.4.1-4.ed05e01git.el7ost
puppet-nova
Red Hat:openstack:13::el7
 before 0:12.4.0-16.el7ost
0:12.4.0-16.el7ost
puppet-octavia
Red Hat:openstack:13::el7
 before 0:12.4.0-8.el7ost
0:12.4.0-8.el7ost
puppet-opendaylight
Red Hat:openstack:13::el7
 before 0:8.2.2-5.9126c8dgit.el7ost
0:8.2.2-5.9126c8dgit.el7ost
puppet-ovn
Red Hat:openstack:13::el7
 before 0:12.4.0-2.el7ost
0:12.4.0-2.el7ost
puppet-pacemaker
Red Hat:openstack:13::el7
 before 0:0.7.2-0.20180423212257.el7ost
0:0.7.2-0.20180423212257.el7ost
puppet-swift
Red Hat:openstack:13::el7
 before 0:12.4.0-4.el7ost
0:12.4.0-4.el7ost
puppet-tripleo
Red Hat:openstack:13::el7
 before 0:8.3.6-15.el7ost
0:8.3.6-15.el7ost
python-mistral
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
python-mistral-tests
Red Hat:openstack:13::el7
 before 0:6.0.6-2.el7ost
0:6.0.6-2.el7ost
python-os-brick
Red Hat:openstack:13::el7
 before 0:2.3.4-2.el7ost
0:2.3.4-2.el7ost
python-tripleoclient
Red Hat:openstack:13::el7
 before 0:9.2.6-8.el7ost
0:9.2.6-8.el7ost
python2-os-brick
Red Hat:openstack:13::el7
 before 0:2.3.4-2.el7ost
0:2.3.4-2.el7ost
mistral
Ubuntu:Pro:16.04:LTS
 before 2.0.0-1ubuntu2+esm1, plus listed versions
1.0.0-11.0.0-42.0.0~b3-32.0.0~rc1-12.0.0~rc2-12.0.0-12.0.0-1ubuntu2
2.0.0-1ubuntu2+esm1
mistral
Ubuntu:Pro:18.04:LTS
 before 6.0.0-0ubuntu1.1+esm1, plus listed versions
5.0.0-0ubuntu16.0.0~b1-0ubuntu16.0.0~b1-0ubuntu26.0.0~b2-0ubuntu16.0.0~rc1-0ubuntu16.0.0-0ubuntu16.0.0-0ubuntu1.1
6.0.0-0ubuntu1.1+esm1
python-mistral-lib
Ubuntu:Pro:18.04:LTS
 before 0.4.0-0ubuntu1+esm1, plus listed versions
0.2.0-0ubuntu20.3.2-0ubuntu10.3.3-0ubuntu10.4.0-0ubuntu1
0.4.0-0ubuntu1+esm1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 96 moreShow less
This page doesn't list everything

Left out here: 11 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open