CVE-2014-7231 | BDVDB-2026-64740 Detail

Description#

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/oss-sec/2014/q3/853
https://exchange.xforce.ibmcloud.com/vulnerabilities/96726
http://rhn.redhat.com/errata/RHSA-2014-1939.html
https://bugs.launchpad.net/oslo.utils/+bug/1345233
http://www.securityfocus.com/bid/70184

Exploit#

No public exploit known

History#

Version 12014-10-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.