Skip to content
Sign in
3.1 Low

CVE-2018-16849 A flaw was found in openstack-mistral

Description

A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.

Affected products and versions

Product Affected versions Fixed in
openstack-mistral Versions not published

Other CVEs of openstack-mistral

The 3 CVEs of openstack-mistral →
CVE-2019-3866 An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing… 5.9 Medium CVE-2017-2622 An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly… 5.9 Medium
Track this CVE