Preisgabe von Informationen in sensu
ID: | RHSA-2018:1606-01 |
Distribution: | Red Hat |
Plattformen: | Red Hat Enterprise Linux OpenStack Platform |
Datum: | Do, 17. Mai 2018, 23:00 |
Referenzen: | https://access.redhat.com/security/cve/CVE-2018-1000060 |
Applikationen: | sensu |
Originalnachricht |
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: sensu security update Advisory ID: RHSA-2018:1606-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2018:1606 Issue date: 2018-05-17 CVE Names: CVE-2018-1000060 ===================================================================== 1. Summary: An update for sensu is now available for Red Hat OpenStack Platform 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 10.0 Operational Tools for RHEL 7 - noarch 3. Description: Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security fix(es): * Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text. (CVE-2018-1000060) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1541402 - CVE-2018-1000060 sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections 6. Package List: Red Hat OpenStack Platform 10.0 Operational Tools for RHEL 7: Source: sensu-0.23.2-4.el7ost.src.rpm noarch: sensu-0.23.2-4.el7ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-1000060 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is |