Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-7230
HistoryOct 08, 2014 - 7:55 p.m.

CVE-2014-7230

2014-10-0819:55:04
CWE-200
[email protected]
web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.

Affected configurations

NVD
Node
openstackcinderRange2013.2–2013.2.4
OR
openstackcinderRange2014.1–2014.1.3
OR
openstacknovaRange2013.2–2013.2.4
OR
openstacknovaRange2014.1–2014.1.3
OR
openstacktroveRange2013.2–2013.2.4
OR
openstacktroveRange2014.1–2014.1.3
Node
redhatopenstackMatch5.0
Node
canonicalubuntu_linuxMatch14.04lts

Related

cvelist 1
cve 1
debiancve 1
veracode 1
prion 1
ubuntucve 1
openvas 2
nessus 4
redhat 1
ubuntu 2
securityvulns 3
cvelist
cvelist
CVE-2014-7230
2014-10-08 19:00:00
cve
cve
CVE-2014-7230
2014-10-08 19:55:04
debiancve
debiancve
CVE-2014-7230
2014-10-08 19:55:04
veracode
veracode
Information Disclosure
2019-01-15 09:03:13
prion
prion
Design/Logic Flaw
2014-10-08 19:55:00
ubuntucve
ubuntucve
CVE-2014-7230
2014-10-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2405-1)
2014-11-12 00:00:00
Ubuntu: Security Advisory (USN-2407-1)
2014-11-12 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : OpenStack Cinder vulnerabilities (USN-2405-1)
2014-11-12 00:00:00
RHEL 7 : openstack-trove (RHSA-2014:1939)
2024-04-24 00:00:00
Ubuntu 14.04 LTS : OpenStack Nova vulnerabilities (USN-2407-1)
2014-11-12 00:00:00
redhat
redhat
(RHSA-2014:1939) Low: openstack-trove security update
2014-12-02 16:42:21
ubuntu
ubuntu
OpenStack Nova vulnerabilities
2014-11-11 00:00:00
OpenStack Cinder vulnerabilities
2014-11-11 00:00:00
securityvulns
securityvulns
[USN-2407-1] OpenStack Nova vulnerabilities
2014-12-01 00:00:00
[USN-2405-1] OpenStack Cinder vulnerabilities
2014-12-01 00:00:00
OpenStack multiple security vulnerabilities
2014-12-01 00:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2014-7230
cvelist1cve1debiancve1veracode1prion1ubuntucve1openvas2nessus4redhat1ubuntu2securityvulns3