{"id":"CVE-2022-0718","aliases":["DEBIAN-CVE-2022-0718","DLA-3106-1","DLA-3870-1","EUVD-2022-0189","GHSA-wmqq-r32m-87c5","MGASA-2022-0189","PYSEC-2022-258","RHSA-2022:0993","RHSA-2022:8873","SUSE-SU-2025:02448-1","UBUNTU-CVE-2022-0718","USN-5369-1"],"status":"published","title":"python-oslo-utils has improper password parsing","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01859,"percentile":0.79375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-522","CWE-532"],"published":"2022-03-23T00:00:00Z","modified":"2026-10-28T02:30:39Z","fixes":[{"ecosystem":"PyPI","package":"oslo-utils","fixed_in":["4.10.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"python-oslo.utils","fixed_in":["4.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-oslo.utils","fixed_in":["4.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-oslo.utils","fixed_in":["4.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"python-oslo.utils","fixed_in":["3.36.5-0+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"python-oslo.utils","fixed_in":["4.6.1-0+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"python-oslo-utils","fixed_in":["4.12.1-2.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python-oslo-utils","fixed_in":["0:3.41.6-2.20220111011750.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python-oslo-utils-lang","fixed_in":["0:3.41.6-2.20220111011750.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-oslo-utils","fixed_in":["0:3.41.6-2.20220111011750.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python-oslo-utils","fixed_in":["0:3.41.6-1.20220426095230.f4deaad.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python-oslo-utils-lang","fixed_in":["0:3.41.6-1.20220426095230.f4deaad.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-oslo-utils","fixed_in":["0:3.41.6-1.20220426095230.f4deaad.el8ost"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-oslo.utils","fixed_in":["4.1.1-150200.8.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-oslo.utils","fixed_in":["4.1.1-150200.8.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-oslo.utils","fixed_in":["4.1.1-150200.8.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"python-oslo.utils","fixed_in":["4.1.1-150200.8.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"python-oslo.utils","fixed_in":["4.1.1-150200.8.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python-oslo.utils","fixed_in":["4.1.1-150200.8.7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-oslo.utils","fixed_in":["3.8.0-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"python-oslo.utils","fixed_in":["3.35.0-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"python-oslo.utils","fixed_in":["4.1.1-0ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.5-0+deb10u2"}]}],"versions":["3.36.4-2","3.36.5-0+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-0+deb11u1"}]}],"versions":["4.6.0-2"]},{"source":"osv","ecosystem":"PyPI","package":"oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1"}]}],"versions":["0.1.0","0.1.1","0.2.0","0.3.0","1.0.0","1.1.0","1.1.1","1.2.0","1.2.1","1.3.0","1.4.0","1.4.1","1.4.2","1.5.0","1.6.0","1.7.0","1.8.0","1.9.0","2.0.0","2.1.0","2.2.0","2.3.0","2.4.0","2.5.0","2.6.0","2.7.0","2.8.0","3.0.0","3.1.0","3.10.0","3.11.0","3.12.0","3.13.0","3.14.0","3.15.0","3.16.0","3.16.1","3.17.0","3.18.0","3.19.0","3.2.0","3.20.0","3.21.0","3.22.0","3.22.1","3.22.2","3.22.3","3.23.0","3.24.0","3.25.0","3.25.1","3.26.0","3.27.0","3.28.0","3.28.1","3.28.2","3.28.3","3.28.4","3.29.0","3.3.0","3.30.0","3.31.0","3.32.0","3.33.0","3.34.0","3.35.0","3.35.1","3.36.0","3.36.1","3.36.2","3.36.3","3.36.4","3.36.5","3.37.0","3.37.1","3.38.0","3.39.0","3.39.1","3.4.0","3.40.0","3.40.1","3.40.2","3.40.3","3.40.4","3.40.5","3.40.6","3.40.7","3.41.0","3.41.1","3.41.2","3.41.3","3.41.4","3.41.5","3.41.6","3.42.0","3.42.1","3.5.0","3.6.0","3.7.0","3.8.0","3.9.0","4.0.0","4.0.1","4.1.0","4.1.1","4.1.2","4.10.0","4.2.0","4.2.1","4.2.2","4.3.0","4.4.0","4.5.0","4.6.0","4.6.1","4.7.0","4.8.0","4.8.1","4.8.2","4.9.0","4.9.1","4.9.2"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.1-2.mga8"}]}]},{"source":"osv","ecosystem":"PyPI","package":"oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1"}]}],"versions":["0.1.0","0.1.1","0.2.0","0.3.0","1.0.0","1.1.0","1.1.1","1.2.0","1.2.1","1.3.0","1.4.0","1.4.1","1.4.2","1.5.0","1.6.0","1.7.0","1.8.0","1.9.0","2.0.0","2.1.0","2.2.0","2.3.0","2.4.0","2.5.0","2.6.0","2.7.0","2.8.0","3.0.0","3.1.0","3.10.0","3.11.0","3.12.0","3.13.0","3.14.0","3.15.0","3.16.0","3.16.1","3.17.0","3.18.0","3.19.0","3.2.0","3.20.0","3.21.0","3.22.0","3.22.1","3.22.2","3.22.3","3.23.0","3.24.0","3.25.0","3.25.1","3.26.0","3.27.0","3.28.0","3.28.1","3.28.2","3.28.3","3.28.4","3.29.0","3.3.0","3.30.0","3.31.0","3.32.0","3.33.0","3.34.0","3.35.0","3.35.1","3.36.0","3.36.1","3.36.2","3.36.3","3.36.4","3.36.5","3.37.0","3.37.1","3.38.0","3.39.0","3.39.1","3.4.0","3.40.0","3.40.1","3.40.2","3.40.3","3.40.4","3.40.5","3.40.6","3.40.7","3.41.0","3.41.1","3.41.2","3.41.3","3.41.4","3.41.5","3.41.6","3.42.0","3.42.1","3.5.0","3.6.0","3.7.0","3.8.0","3.9.0","4.0.0","4.0.1","4.1.0","4.1.1","4.1.2","4.10.0","4.2.0","4.2.1","4.2.2","4.3.0","4.4.0","4.5.0","4.6.0","4.6.1","4.7.0","4.8.0","4.8.1","4.8.2","4.9.0","4.9.1","4.9.2"]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.41.6-2.20220111011750.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python-oslo-utils-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.41.6-2.20220111011750.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.41.6-2.20220111011750.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.41.6-1.20220426095230.f4deaad.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python-oslo-utils-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.41.6-1.20220426095230.f4deaad.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.41.6-1.20220426095230.f4deaad.el8ost"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-150200.8.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-150200.8.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-150200.8.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-150200.8.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-150200.8.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-150200.8.7.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-2ubuntu0.1~esm1"}]}],"versions":["2.5.0-1ubuntu1","3.0.0-1ubuntu1","3.4.0-1ubuntu1","3.7.0-0ubuntu1","3.7.0-1","3.8.0-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.35.0-0ubuntu1.1"}]}],"versions":["3.28.0-0ubuntu1","3.31.0-0ubuntu1","3.32.0-0ubuntu1","3.33.0-0ubuntu1","3.35.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-0ubuntu1.1"}]}],"versions":["3.41.1-0ubuntu1","3.41.1-0ubuntu2","3.42.1-0ubuntu1","4.0.0-0ubuntu1","4.1.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-2ubuntu0.1~esm1"}]}],"versions":["2.5.0-1ubuntu1","3.0.0-1ubuntu1","3.4.0-1ubuntu1","3.7.0-0ubuntu1","3.7.0-1","3.8.0-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.35.0-0ubuntu1.1"}]}],"versions":["3.28.0-0ubuntu1","3.31.0-0ubuntu1","3.32.0-0ubuntu1","3.33.0-0ubuntu1","3.35.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-0ubuntu1.1"}]}],"versions":["3.41.1-0ubuntu1","3.41.1-0ubuntu2","3.42.1-0ubuntu1","4.0.0-0ubuntu1","4.1.1-0ubuntu1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openstack","product":"oslo.utils"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"redhat","product":"openstack_platform"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056850","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://bugs.launchpad.net/oslo.utils/+bug/1949623","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","web"]},{"url":"https://opendev.org/openstack/oslo.utils/commit/6e17ae1f7959c64dfd20a5f67edf422e702426aa","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0718","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0718","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00015.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0718","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/oslo-utils/PYSEC-2022-258.yaml","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0993","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8873","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wmqq-r32m-87c5","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0718.json","tags":["advisory"]},{"url":"https://github.com/openstack/oslo.utils","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2022-0189.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30254","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5369-1","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0993.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0718","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8873.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502448-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196454","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0718","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-0718","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-0718","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","status":"published","published":"2022-08-29T14:03:04Z","modified":"2024-08-02T23:40:03.318Z","cwes":["CWE-522"],"updated_at":"2026-11-02T14:34:41.34666Z"}],"euvd":[{"id":"EUVD-2022-0189","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","status":"published","published":"2022-08-29T14:03:04Z","modified":"2024-08-02T23:40:03Z","updated_at":"2026-11-03T03:26:04.481305Z"}],"ghsa":[{"id":"GHSA-wmqq-r32m-87c5","title":"python-oslo-utils has improper password parsing","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext","status":"published","published":"2022-08-29T20:06:50Z","modified":"2024-10-08T12:56:51Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-522","CWE-532"],"updated_at":"2026-11-02T14:38:08.742903Z"}],"nvd":[{"id":"CVE-2022-0718","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","status":"published","published":"2022-08-29T15:15:09.807Z","modified":"2026-06-17T04:21:07.353Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522","CWE-532"],"updated_at":"2026-11-02T14:07:25.883929Z"}],"osv":[{"id":"DEBIAN-CVE-2022-0718","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","status":"published","published":"2022-08-29T15:15:09.807Z","modified":"2026-11-03T08:00:56.304353109Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"GHSA-wmqq-r32m-87c5","title":"python-oslo-utils has improper password parsing","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext","status":"published","published":"2022-08-29T20:06:50Z","modified":"2024-10-08T13:02:50.17169Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-522","CWE-532"],"updated_at":"2026-11-02T15:46:58.767335Z"},{"id":"RHSA-2022:0993","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-oslo-utils) security update","status":"published","published":"2024-09-18T05:54:30Z","modified":"2025-11-22T12:31:32Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:8873","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) security update","status":"published","published":"2024-09-18T05:56:01Z","modified":"2025-11-22T12:42:27Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"UBUNTU-CVE-2022-0718","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","status":"published","published":"2022-03-23T00:00:00Z","modified":"2026-02-04T04:05:29.237806Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"CVE-2022-0718","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","status":"published","published":"2022-08-29T14:03:04Z","modified":"2026-10-28T02:30:39.822584967Z","cwes":["CWE-522"],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"DLA-3106-1","title":"python-oslo.utils - security update","status":"published","published":"2022-09-13T00:00:00Z","modified":"2026-03-09T01:23:08.990258Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3870-1","title":"python-oslo.utils - security update","status":"published","published":"2024-09-05T00:00:00Z","modified":"2026-03-09T01:21:40.762283Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0189","title":"Updated python-oslo-utils packages fix security vulnerability","description":"oslo.utils could be made to expose sensitive information if it received a\nspecially crafted input (CVE-2022-0718)\n","status":"published","published":"2022-05-19T07:56:04Z","modified":"2026-04-16T04:40:45.782712478Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"PYSEC-2022-258","description":"A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( \" ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.","status":"published","published":"2022-08-29T15:15:00Z","modified":"2023-11-08T04:07:38.813658Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"SUSE-SU-2025:02448-1","title":"Security update for python-oslo.utils","description":"This update for python-oslo.utils fixes the following issues:\n\n- CVE-2022-0718: Fixed incorrect password masking in debug output. (bsc#1196454)\n","status":"published","published":"2025-07-21T14:46:13Z","modified":"2026-02-04T03:42:33.986892Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"USN-5369-1","title":"python-oslo.utils vulnerability","description":"It was discovered that oslo.utils incorrectly handled certain inputs.\nAn attacker could possibly use this issue to expose sensitive information.\n","status":"published","published":"2022-04-07T13:30:53Z","modified":"2026-06-25T13:31:07.540580469Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}