CVE-2017-7214

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-532

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/96998Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1508
https://access.redhat.com/errata/RHSA-2017:1595
https://launchpad.net/bugs/1673569Patch, Third Party Advisory
http://www.securityfocus.com/bid/96998Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1508
https://access.redhat.com/errata/RHSA-2017:1595
https://launchpad.net/bugs/1673569Patch, Third Party Advisory

Timeline

Published: Mar 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-72156.1Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app CVE-2017-72166.5The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via CVE-2017-72174.3The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export fi CVE-2017-72187.8The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified CVE-2017-72198.8A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 CVE-2017-72208.8OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE CVE-2017-72218.8OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to CVE-2017-72226.1A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript (if Manti CVE-2017-72237.5GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the CVE-2017-72245.5The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt b CVE-2017-72257.5The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name ar CVE-2017-72269.1The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to