CVE-2014-7231

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2014-1939.htmlThird Party Advisory
• http://seclists.org/oss-sec/2014/q3/853Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/70184Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/oslo.utils/+bug/1345233Exploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96726Third Party Advisory, VDB Entry
• http://rhn.redhat.com/errata/RHSA-2014-1939.htmlThird Party Advisory
• http://seclists.org/oss-sec/2014/q3/853Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/70184Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/oslo.utils/+bug/1345233Exploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96726Third Party Advisory, VDB Entry

Published

Oct 8, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7224A Code Execution vulnerability exists in Android prior to 4.…8.8
• CVE-2014-7226The file comment feature in Rejetto HTTP File Server (hfs) 2…
• CVE-2014-7227Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-7228Akeeba Restore (restore.php), as used in Joomla! 2.5.4 throu…
• CVE-2014-7229Unspecified vulnerability in Joomla! before 2.5.4 before 2.5…
• CVE-2014-7230The processutils.execute function in OpenStack oslo-incubato…
• CVE-2014-7232GE Healthcare Discovery XR656 and XR656 G2 has a password of…
• CVE-2014-7233GE Healthcare Precision THUNIS-800+ has a default password o…
• CVE-2014-7234Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7235htdocs_ari/includes/login.php in the ARI Framework module/As…
• CVE-2014-7236Eval injection vulnerability in lib/TWiki/Plugins.pm in TWik…9.1
• CVE-2014-7237lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when runnin…