{"id":"CVE-2019-3830","details":"A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.","aliases":["GHSA-2cvf-r9jm-4qm9","PYSEC-2019-78"],"modified":"2026-07-08T05:55:58.392499154Z","published":"2019-03-26T18:29:00.700Z","database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"openstack:ceilometer","cpes":["cpe:2.3:a:openstack:ceilometer:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"11.01"}]},{"extracted_events":[{"introduced":"10"},{"last_affected":"10"}],"source":"CPE_STRING","vendor_product":"redhat:openstack","cpes":["cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:0919"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3830"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openstack/ceilometer","events":[{"introduced":"2bea61ddef0f760d3030537ded30d79e4d2b7860"},{"last_affected":"b4d95afe92834ca8148210272d32a6676f97298c"}],"database_specific":{"cpe":"cpe:2.3:a:openstack:ceilometer:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2013.1"},{"last_affected":"2015.1.4"}],"source":"CPE_RANGE"}}],"versions":["kilo-eol","2015.1.4","2015.1.3","2015.1.2","2015.1.1","2015.1.0rc2","2015.1.0","2015.1.0rc1","2015.1.0b3","2015.1.0b2","2015.1.0b1","2014.2.rc1","2014.2.b3","2014.2.b2","2014.2.b1","2014.1.rc1","2014.1.b3","2014.1.b2","2014.1.b1","2013.2.rc1","2013.2.b1","2013.1.rc1","2013.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3830.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}