CVE-2014-7231
Dashboard / Vulnerabilities / CVE-2014-7231
Summary:
Details: The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.
References: http://rhn.redhat.com/errata/RHSA-2014-1939.html, http://seclists.org/oss-sec/2014/q3/853, http://www.securityfocus.com/bid/70184, https://bugs.launchpad.net/oslo.utils/+bug/1345233, https://exchange.xforce.ibmcloud.com/vulnerabilities/96726, http://seclists.org/oss-sec/2014/q3/853, https://bugs.launchpad.net/oslo.utils/+bug/1345233
Affected packages
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
