{"action":"Upgrade ceilometer to 12.0.0.0rc1 or later.","affected":[{"fixed":"12.0.0.0rc1","introduced":"0"}],"component":"ceilometer","cve_ids":["CVE-2019-3830"],"ecosystem":"PyPI","epss":0.00389,"exploited":false,"fixed_versions":["12.0.0.0rc1"],"ghsa_id":"GHSA-2cvf-r9jm-4qm9","id":"tcs_01M5KESENWZ7X5RS6N07HMSETR","modified_at":"2024-09-13T15:22:19.002785Z","published_at":"2022-05-13T01:14:22Z","references":["https://osv.dev/vulnerability/GHSA-2cvf-r9jm-4qm9","https://nvd.nist.gov/vuln/detail/CVE-2019-3830","https://github.com/openstack/ceilometer/commit/8881a42af169a2d7c912b1434911f978883c83f3","https://github.com/openstack/ceilometer/commit/8881a42af169a2d7c912b1434911f978883c83f3#diff-f2d2273521cce7e69f7032c6185936736a5acc70b2b2f90d956b9a7998b087cd","https://access.redhat.com/errata/RHSA-2019:0919","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3830","https://github.com/openstack/ceilometer","https://github.com/pypa/advisory-database/tree/main/vulns/ceilometer/PYSEC-2019-78.yaml"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-2cvf-r9jm-4qm9","url":"https://osv.dev/vulnerability/GHSA-2cvf-r9jm-4qm9"}],"summary":"Ceilometer Prints Sensitive Configuration Data to Log"}