CVE-2018-16849: OpenStack Mistral Arbitrary File Disclosure
Summary
CVE-2018-16849: A flaw was found in openstack-mistral. Affects mistral versions < 7.0.1. Fixed in 7.0.1. How to fix ↓
Also tracked for
- mistral · Debian:11
The same CVE-2018-16849 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenStack Mistral is an open-source workflow service that allows users to define and execute tasks in a cloud environment. It provides a framework for defining workflows as code and automating complex processes. Mistral is written in Python and is available on the Python Package Index (PyPI).
Vulnerability Detail
A flaw was discovered in openstack-mistral that allows an attacker to disclose the presence of arbitrary files within the filesystem of the executor running the action. By manipulating the SSH private key filename, an attacker can use the std.ssh action to assess whether a file exists on the executor's filesystem. This vulnerability exists in versions 0 through 7.0.1 of the Mistral package.
How To Fix
Minimum fixed version
7.0.1
This is the first release that contains the fix.
pip install --upgrade "mistral==7.0.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability.
Conclusion
The OpenStack Mistral package is vulnerable to an arbitrary file disclosure issue that can be exploited by manipulating the SSH private key filename. Upgrading to Mistral version 7.0.1 or later is recommended to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mistral →
FAQ
OpenStack Mistral is an open-source workflow service for defining and executing tasks in a cloud environment.
This vulnerability allows an attacker to determine the existence of arbitrary files on the executor's filesystem, potentially aiding in further attacks or information disclosure.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Pipfile.lock and the playground will alert you in real-time.
No, there is currently no known workaround for this vulnerability.
To fix this vulnerability, upgrade to Mistral version 7.0.1 or later, which includes a fix for the issue.
References
Related vulnerabilities
Recent vulnerabilities recorded for mistral.
