{"id":"CVE-2021-3585","aliases":["EUVD-2021-26893","GHSA-4qwm-996c-w925","UBUNTU-CVE-2021-3585"],"status":"published","title":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs...","description":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00254,"percentile":0.17094,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-312"],"published":"2022-08-26T15:25:41Z","modified":"2026-10-24T10:30:34Z","affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.1-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.0-1"]}],"products":[{"vendor":"openstack","product":"tripleo_heat_templates"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961709","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Permissions Required","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968247","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugs.launchpad.net/tripleo/+bug/1931132","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://review.opendev.org/c/openstack/tripleo-heat-templates/+/791988","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3585","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3585"},{"url":"https://github.com/advisories/GHSA-4qwm-996c-w925"},{"url":"https://ubuntu.com/security/CVE-2021-3585","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3585","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-3585","description":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.","status":"published","published":"2022-08-26T15:25:41Z","modified":"2024-08-03T17:01:07.616Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26893","description":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.","status":"published","published":"2022-08-26T15:25:41Z","modified":"2024-08-03T17:01:07Z","updated_at":"2026-11-03T03:25:12.535968Z"}],"ghsa":[{"id":"GHSA-4qwm-996c-w925","title":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs...","description":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.","status":"published","published":"2022-08-27T00:00:45Z","modified":"2023-01-30T05:01:40Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:46:27.869667Z"}],"nvd":[{"id":"CVE-2021-3585","description":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.","status":"published","published":"2022-08-26T16:15:09.01Z","modified":"2026-06-17T04:05:23.4Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-312"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"CVE-2021-3585","description":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.","status":"published","published":"2022-08-26T16:15:09.01Z","modified":"2026-10-24T10:30:34.028027268Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"UBUNTU-CVE-2021-3585","description":"A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.","status":"published","published":"2022-08-26T16:15:00Z","modified":"2025-10-24T04:49:53Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"}]}}