Back to CVE Browser

CVE-2017-7214

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1310%

EPSS Percentile13.68th

PublishedMar 21, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Affected Platforms (CPE)

📦

Openstack

Nova

= 13.0.0

📦

Openstack

Nova

= 13.1.0

📦

Openstack

Nova

= 13.1.1

📦

Openstack

Nova

= 13.1.2

📦

Openstack

Nova

= 13.1.3

📦

Openstack

Nova

= 14.0.0

📦

Openstack

Nova

= 14.0.1

📦

Openstack

Nova

= 14.0.2

📦

Openstack

Nova

= 14.0.3

📦

Openstack

Nova

= 14.0.4

📦

Openstack

Nova

= 15.0.0

📦

Openstack

Nova

= 15.0.1

References & Advisories

🔗 http://www.securityfocus.com/bid/96998

🔗 https://access.redhat.com/errata/RHSA-2017:1508

🔗 https://access.redhat.com/errata/RHSA-2017:1595

🔗 https://launchpad.net/bugs/1673569

🔗 http://www.securityfocus.com/bid/96998

🔗 https://access.redhat.com/errata/RHSA-2017:1508

🔗 https://access.redhat.com/errata/RHSA-2017:1595

🔗 https://launchpad.net/bugs/1673569

Related Vulnerabilities

CVE-2004-245310.0

Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and a...

CVE-2020-107319.9

A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabl...

CVE-2018-190238.8

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unau...

CVE-2021-454188.8

Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet <=...