CVE-2017-7214

CRITICAL

OpenStack Nova <15.0.1 - Info Disclosure

Title source: llm

Description

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

References (4)

Scores

CVSS v3 9.8
EPSS 0.0130
EPSS Percentile 79.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-532
Status draft

Affected Products (13)

openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
openstack/nova
pypi/nova < 13.1.4PyPI

Timeline

Published Mar 21, 2017
Tracked Since Feb 18, 2026