CVE-2014-7230 PUBLISHED

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.

EPSS 0.12% · 31.3th percentile

Risk Scores

EPSS Score
0.12%
31.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTStrove2.1.0-3, 2.1.0-2, 0
Ubuntu:16.04:LTStrove2.1.0-2, 0
Ubuntu:14.04:LTScinder1:2014.1~b2-0ubuntu1, 1:2014.1~b3-0ubuntu2, 1:2014.1~b3-0ubuntu3
Ubuntu:14.04:LTSnova1:2014.1~b2-0ubuntu3, 1:2014.1~b2-0ubuntu4, 1:2014.1~b3-0ubuntu1

Timeline

References

Open in Interactive Console →