CVE-2014-7230

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2014-1939.htmlThird Party Advisory
• http://seclists.org/oss-sec/2014/q3/853Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/70185Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2405-1Third Party Advisory
• https://bugs.launchpad.net/oslo-incubator/+bug/1343604Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96725Third Party Advisory, VDB Entry
• http://rhn.redhat.com/errata/RHSA-2014-1939.htmlThird Party Advisory
• http://seclists.org/oss-sec/2014/q3/853Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/70185Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2405-1Third Party Advisory
• https://bugs.launchpad.net/oslo-incubator/+bug/1343604Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96725Third Party Advisory, VDB Entry

Published

Oct 8, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7222Buffer overflow in TeamSpeak Client 3.0.14 and earlier allow…
• CVE-2014-7224A Code Execution vulnerability exists in Android prior to 4.…8.8
• CVE-2014-7226The file comment feature in Rejetto HTTP File Server (hfs) 2…
• CVE-2014-7227Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-7228Akeeba Restore (restore.php), as used in Joomla! 2.5.4 throu…
• CVE-2014-7229Unspecified vulnerability in Joomla! before 2.5.4 before 2.5…
• CVE-2014-7231The strutils.mask_password function in the OpenStack Oslo ut…
• CVE-2014-7232GE Healthcare Discovery XR656 and XR656 G2 has a password of…
• CVE-2014-7233GE Healthcare Precision THUNIS-800+ has a default password o…
• CVE-2014-7234Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7235htdocs_ari/includes/login.php in the ARI Framework module/As…
• CVE-2014-7236Eval injection vulnerability in lib/TWiki/Plugins.pm in TWik…9.1