NVD

Id
34652  
Name
CVE-2014-7231  
Description
The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-10-08  
Modified Date
2015-09-28  
Seq
2014-7231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178642 34652 CVE-2014-7231 RHSA-2014:1939  View
178643 34652 CVE-2014-7231 [oss-security] 20140929 Re: CVE request for vulnerability in OpenStack Cinder, Nova and Trove  View
178644 34652 CVE-2014-7231 70184  View
178645 34652 CVE-2014-7231 openstack-nova-cve20147231-info-disc(96726)  View
178646 34652 CVE-2014-7231 https://bugs.launchpad.net/oslo.utils/+bug/1345233  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15742 JVNDB-2014-004617 複数の OpenStack 製品の strutils.mask_password 関数におけるパスワードを取得される脆弱性 OpenStack Oslo ユーティリティライブラリ、Cinder、Nova、および Trove の strutils.mask_password 関数は、コマンドを記録する際、パスワードを適切にマスクしないため、パスワードを取得される脆弱性が存在します。 CVE-2014-7231 74524 CVE-2014-7231 34652 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004617.html 2014-10-06 2014-12-17 View