Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2017-7214

Date: March 21, 2017

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Severity Score

Related Resources (11)

https://github.com/openstack/nova/commit/acb19160d4d348e29a21ad57c61c7369352c4d1c
http://www.securityfocus.com/bid/96998
https://github.com/openstack/nova/commit/e193201fa1de5b08b29adefd8c149935c5529598
https://github.com/openstack/nova
https://launchpad.net/bugs/1673569
https://github.com/openstack/nova/commit/3f985f1eda6f29180878a3d21c20c5057179486a
https://nvd.nist.gov/vuln/detail/CVE-2017-7214
https://access.redhat.com/errata/RHSA-2017:1508
https://access.redhat.com/errata/RHSA-2017:1595
https://github.com/openstack/nova/commit/c2c91ce44592fc5dc2aacee1cf7f5b5cfd2e9a0a
https://www.mend.io/vulnerability-database/CVE-2017-7214

Severity Score

Weakness Type (CWE)

Information Exposure Through Log Files

CWE-532

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us