CVE-2019-3830

Vulnerability

A vulnerability in ceilometer, affecting versions before 12.0.0.0rc1 and Red Hat OpenStack Platform (RHOS) versions 10.0 (Newton) through 14.0 (Rocky), causes the ceilometer-agent to print sensitive configuration data (e.g., passwords, tokens) to log files even when DEBUG logging is not activated [1][4]. This is an information exposure flaw that triggers regardless of the log level setting [2][3].

Exploitation

An attacker with read access to the ceilometer log files (e.g., via compromised host, log aggregator, or shared storage) can retrieve the exposed sensitive configuration values. No authentication, user interaction, or race condition is required to trigger the log output—the agent writes the data on every start or reload [4].

Impact

Successful exploitation leads to disclosure of sensitive credentials or tokens stored in the ceilometer configuration, potentially allowing lateral movement within the OpenStack environment or unauthorized access to other services [2][4]. The impact is limited to information disclosure; however, leaked credentials could enable further compromise.

Mitigation

The vulnerability is fixed in ceilometer version 12.0.0.0rc1 and later [1]. Red Hat provided updated packages via RHSA-2019:0566 for RHOS 13.0 (Queens), RHSA-2019:0580 for RHOS 14.0 (Rocky), and RHSA-2019:0919 for RHOS 10.0 (Newton) [2][4]. Administrators should apply the appropriate update or restrict access to ceilometer log files as a workaround.