CVE-2014-7231

State: Published
Severity: Not scored
Published: Oct 8, 2014
Updated: Aug 6, 2024
Reserved: Sep 29, 2014

Description

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20140929 Re: CVE request for vulnerability in OpenStack Cinder, Nova and Trovemailing-list
openstack-nova-cve20147231-info-disc(96726)vdb-entry
RHSA-2014:1939vendor-advisory
https://bugs.launchpad.net/oslo.utils/+bug/1345233
70184vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.