CVE-2017-7214

Critical

Published: 21/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in exception_wrapper.py in OpenStack Nova versions 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Risk Assessment

Organizations may be exposed to the disclosure of sensitive data, which could lead to unauthorized access to user accounts and system resources.

Recommendation

It is recommended to update OpenStack Nova to the latest version to mitigate this vulnerability and to monitor logs for potential data leaks.

Original NVD description (English source)

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.