CVE-2014-7230
- Source
- https://cve.org/CVERecord?id=CVE-2014-7230
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-7230.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2014-7230
- Downstream
DEBIAN (1)
SUSE (1)
UBUNTU (1)
- Related
- Published
- 2014-10-08T19:55:04Z
- Modified
- 2026-04-10T03:44:01Z
- Summary
- [none]
- Details
-
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.
- References
-
- http://rhn.redhat.com/errata/RHSA-2014-1939.html
- http://seclists.org/oss-sec/2014/q3/853
- http://www.securityfocus.com/bid/70185
- http://www.ubuntu.com/usn/USN-2405-1
- https://bugs.launchpad.net/oslo-incubator/+bug/1343604
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96725
- http://seclists.org/oss-sec/2014/q3/853