CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
5.1%
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.
Vendor | Product | Version | CPE |
---|---|---|---|
openstack | cinder | * | cpe:2.3:a:openstack:cinder:*:*:*:*:*:*:*:* |
openstack | nova | * | cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* |
openstack | trove | * | cpe:2.3:a:openstack:trove:*:*:*:*:*:*:*:* |
redhat | openstack | 5.0 | cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:* |
canonical | ubuntu_linux | 14.04 | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* |