{"action":"Upgrade oslo-middleware to 3.8.1 or later.","affected":[{"fixed":"3.19.1","introduced":"3.9.0"},{"fixed":"3.8.1","introduced":"0"},{"fixed":"3.23.1","introduced":"3.20.0"},{"fixed":"3.19.1","introduced":"3.9.0"},{"fixed":"3.8.1","introduced":"0"},{"fixed":"3.23.1","introduced":"3.20.0"}],"component":"oslo-middleware","cve_ids":["CVE-2017-2592"],"ecosystem":"PyPI","epss":0.00442,"exploited":false,"fixed_versions":["3.19.1","3.8.1","3.23.1"],"ghsa_id":"GHSA-xcp8-hh74-f6mc","id":"tcs_01M5KG41C76XNZEZJHRH0PPRX0","modified_at":"2024-10-07T21:36:15.987331Z","published_at":"2018-07-13T15:16:45Z","references":["https://osv.dev/vulnerability/GHSA-xcp8-hh74-f6mc","https://nvd.nist.gov/vuln/detail/CVE-2017-2592","https://access.redhat.com/errata/RHSA-2017:0300","https://access.redhat.com/errata/RHSA-2017:0435","https://bugs.launchpad.net/keystonemiddleware/+bug/1628031","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2592","https://github.com/advisories/GHSA-xcp8-hh74-f6mc","https://github.com/openstack/oslo.middleware","https://github.com/pypa/advisory-database/tree/main/vulns/oslo-middleware/PYSEC-2018-104.yaml","https://review.openstack.org/#/c/425730","https://review.openstack.org/#/c/425732","https://review.openstack.org/#/c/425734","https://usn.ubuntu.com/3666-1","http://lists.openstack.org/pipermail/openstack-announce/2017-January/002002.html","http://rhn.redhat.com/errata/RHSA-2017-0300.html","http://rhn.redhat.com/errata/RHSA-2017-0435.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-xcp8-hh74-f6mc","url":"https://osv.dev/vulnerability/GHSA-xcp8-hh74-f6mc"}],"summary":"oslo.middleware Information Disclosure vulnerability"}