CVE-2014-7231
Published Oct 8, 2014
Last updated 6 years ago
Overview
- Description
- The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openstack:cinder:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBC66A4A-2D3E-432A-B642-861B45B4AC35",
"versionEndExcluding": "2013.2.4",
"versionStartIncluding": "2013.2"
},
{
"criteria": "cpe:2.3:a:openstack:cinder:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "895976CB-E362-45E6-872B-B1A060A2E1A0",
"versionEndExcluding": "2014.1.3",
"versionStartIncluding": "2014.1"
},
{
"criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8D50F1D-BB54-4193-9D5E-3D558C34F897",
"versionEndExcluding": "2013.2.4",
"versionStartIncluding": "2013.2"
},
{
"criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82FE6CB2-DF2F-4BFF-A27B-06FFE3195178",
"versionEndExcluding": "2014.1.3",
"versionStartIncluding": "2014.1"
},
{
"criteria": "cpe:2.3:a:openstack:trove:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EDF6737-0BFE-4958-829D-250745A8742E",
"versionEndExcluding": "2013.2.4",
"versionStartIncluding": "2013.2"
},
{
"criteria": "cpe:2.3:a:openstack:trove:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6496CBDF-E0C1-421A-BA81-61E76C972455",
"versionEndExcluding": "2014.1.3",
"versionStartIncluding": "2014.1"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B152EDF3-3140-4343-802F-F4F1C329F5C3"
}
],
"operator": "OR"
}
]
}
]