CVE-2014-7231

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly…

published October 8, 2014

CVSS
—
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00532 · 44.1th percentile
Published
2014-10-08T19:00Z
EPSS history
Timeline
  • 08 OCT 19:00Z
    The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly…
    cvelistv5