{"action":"Upgrade oslo-middleware to 3.8.1 or later.","affected":[{"fixed":"3.8.1","introduced":"0"},{"fixed":"3.19.1","introduced":"3.9.0"},{"fixed":"3.23.1","introduced":"3.20.0"}],"component":"oslo-middleware","cve_ids":["CVE-2017-2592"],"ecosystem":"PyPI","epss":0.00442,"exploited":false,"fixed_versions":["3.19.1","3.8.1","3.23.1"],"ghsa_id":"GHSA-xcp8-hh74-f6mc","id":"tcs_01M5KG7NTQZ6V8KAKW8M2ZJV3B","modified_at":"2023-11-08T03:59:18.331026Z","published_at":"2018-05-08T17:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-104","https://review.openstack.org/#/c/425734/","https://review.openstack.org/#/c/425732/","https://review.openstack.org/#/c/425730/","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2592","https://bugs.launchpad.net/keystonemiddleware/+bug/1628031","https://access.redhat.com/errata/RHSA-2017:0435","https://access.redhat.com/errata/RHSA-2017:0300","http://lists.openstack.org/pipermail/openstack-announce/2017-January/002002.html","http://www.securityfocus.com/bid/95827","http://rhn.redhat.com/errata/RHSA-2017-0435.html","http://rhn.redhat.com/errata/RHSA-2017-0300.html","https://usn.ubuntu.com/3666-1/","https://github.com/advisories/GHSA-xcp8-hh74-f6mc"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2018-104","url":"https://osv.dev/vulnerability/PYSEC-2018-104"},{"source":"nvd","source_id":"CVE-2017-2592","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2592"}],"summary":"python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback's error messa"}