CVE-2022-0718: Debian Linux

Medium severity, CVSS 4.9. EPSS: 1.7% chance of exploitation in the next 30 days.

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

Affected products

  • Debian Debian Linux: version 10.0 only; version 11.0 only
  • Openstack Oslo.utils: before 4.10.1 (fixed in 4.10.1); version 4.12.0 only
  • Red Hat Openshift Container Platform: version 4.0 only
  • Red Hat Openstack Platform: version 16.1 only

Published 2022-08-29. Last modified 2026-06-17.