Red Hat Security AdvisoryRHSA-2014:1939
openstack-trove security update
Released 2014-12-02 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-trove-2014.1.3-1.el7ost, openstack-trove-api-2014.1.3-1.el7ost, openstack-trove-common-2014.1.3-1.el7ost +4
Fixes 2 records
Priority LOW 12
The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local use…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00532 · Published 2014-10-08 · Partial fix · 0.2.0 CWE-200
Priority LOW 12
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00488 · Published 2014-10-08 · Partial fix CWE-200
