Vulnerability CVE-2017-7214
Published: 2017-03-21

Description:
An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Type:

CWE-532

 (Information Exposure Through Log Files)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Openstack -> NOVA 

 References:
http://www.securityfocus.com/bid/96998
https://access.redhat.com/errata/RHSA-2017:1508
https://access.redhat.com/errata/RHSA-2017:1595
https://launchpad.net/bugs/1673569
Copyright 2024, cxsecurity.com

 

Back to Top