Information Disclosure

2019-01-1509:17:53

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

76.0%

JSON

openstack-nova is vulnerable to information disclosure attacks. The vulnerability exists as an issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

CPENameOperatorVersion
openstack-novaeq12.0.3__11.el7ost
openstack-novaeq12.0.6__2.el7ost
openstack-novaeq13.1.0__6.el7ost
openstack-novaeq12.0.2__5.el7ost
openstack-novaeq12.0.4__6.el7ost
openstack-novaeq12.0.4__4.el7ost
openstack-novaeq14.0.2__7.el7ost
openstack-novaeq12.0.4__8.el7ost
openstack-novaeq13.1.2__16.el7ost
openstack-novaeq12.0.6__13.el7ost

Name	Operator	Version
openstack-nova	eq	12.0.3__11.el7ost
openstack-nova	eq	12.0.6__2.el7ost
openstack-nova	eq	13.1.0__6.el7ost
openstack-nova	eq	12.0.2__5.el7ost
openstack-nova	eq	12.0.4__6.el7ost
openstack-nova	eq	12.0.4__4.el7ost
openstack-nova	eq	14.0.2__7.el7ost
openstack-nova	eq	12.0.4__8.el7ost
openstack-nova	eq	13.1.2__16.el7ost
openstack-nova	eq	12.0.6__13.el7ost