CVE-2014-7230
08.10.2014, 19:55
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openstack | cinder | 2013.2 ≤ 𝑥 < 2013.2.4 |
| openstack | cinder | 2014.1 ≤ 𝑥 < 2014.1.3 |
| openstack | nova | 2013.2 ≤ 𝑥 < 2013.2.4 |
| openstack | nova | 2014.1 ≤ 𝑥 < 2014.1.3 |
| openstack | trove | 2013.2 ≤ 𝑥 < 2013.2.4 |
| openstack | trove | 2014.1 ≤ 𝑥 < 2014.1.3 |
| redhat | openstack | 5.0 |
| canonical | ubuntu_linux | 14.04 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cinder |
| ||||||||||||||
| nova |
| ||||||||||||||
| openstack-trove |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cinder |
| ||||||||||||||||||||||||||
| nova |
| ||||||||||||||||||||||||||
| trove |
|
Common Weakness Enumeration
References