Information Disclosure

openstack-trove is vulnerable to information disclosure attacks. The vulnerability exists as the processutils.execute function in OpenStack Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log...

CVE-2014-7230

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log...

PT-2014-7846

Name of the Vulnerable Software and Affected Versions OpenStack oslo-incubator versions prior to 2013.2.4 OpenStack Cinder versions prior to 2013.2.4 OpenStack Nova versions prior to 2013.2.4 OpenStack Trove versions prior to 2013.2.4 OpenStack oslo-incubator versions 2014.1 prior to 2014.1.3...

CVE-2014-7230

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log...

CVE-2014-7230: Exposure of Sensitive Information to an Unauthorized Actor

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log...