CVE-2014-7230

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain…

published October 8, 2014

CVSS
—
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00488 · 40.7th percentile
Published
2014-10-08T19:00Z
EPSS history
Timeline
  • 08 OCT 19:00Z
    The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain…
    cvelistv5