ubuntu · CVE-2014-7231

Quick triage

Priority: medium Published: 2014-10-08 19:55:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-7231 medium priority: Ubuntu including 1 source packages (python-oslo.utils), 4 status rows across 4 suites (lucid, precise, trusty, upstream): DNE 3, released 1.

Description:

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.

cvelogic Threat Intelligence