CVE-2019-3830

Name of the Vulnerable Software and Affected Versions OpenStack Ceilometer versions prior to 12.0.0.0rc1

Description A vulnerability was found in ceilometer that results in an Information Exposure. The ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.

Recommendations For versions prior to 12.0.0.0rc1, update to version 12.0.0.0rc1 or later to resolve the issue. As a temporary workaround, consider configuring the logging settings to prevent sensitive data from being printed to log files. Restrict access to log files to minimize the risk of exploitation.