VYPR
Get started
← All advisories
Critical severity9.8NVD Advisory· Published Mar 21, 2017· Updated May 13, 2026

CVE-2017-7214

CVE-2017-7214

Description

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
novaPyPI
>= 13.0.0, < 13.1.413.1.4
novaPyPI
>= 14.0.0, < 14.0.514.0.5
novaPyPI
>= 15.0.1, < 15.0.215.0.2

Affected products

12
  • OpenStack/Nova12 versions
    cpe:2.3:a:openstack:nova:13.0.0:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:openstack:nova:13.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:13.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:13.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:13.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:13.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:14.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:14.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:14.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:14.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:14.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:15.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:openstack:nova:15.0.1:*:*:*:*:*:*:*

Patches

4
3f985f1eda6f

Add release note for CVE-2017-7214

https://github.com/openstack/novaMatt RiedemannMar 21, 2017via ghsa
commit
1 file changed · +8 −0
  • releasenotes/notes/bug-1673569-cve-2017-7214-2d7644b356015c93.yaml+8 −0 added
    @@ -0,0 +1,8 @@
+---
+prelude: >
+    This release includes fixes for security vulnerabilities.
+security:
+  - |
+    [CVE-2017-7214] Failed notification payload is dumped in logs with auth secrets
+
+    * `Bug 1673569 <https://bugs.launchpad.net/nova/+bug/1673569>`_
c2c91ce44592

Add release note for CVE-2017-7214

https://github.com/openstack/novaMatt RiedemannMar 21, 2017via ghsa
commit
1 file changed · +8 −0
  • releasenotes/notes/bug-1673569-cve-2017-7214-2d7644b356015c93.yaml+8 −0 added
    @@ -0,0 +1,8 @@
+---
+prelude: >
+    This release includes fixes for security vulnerabilities.
+security:
+  - |
+    [CVE-2017-7214] Failed notification payload is dumped in logs with auth secrets
+
+    * `Bug 1673569 <https://bugs.launchpad.net/nova/+bug/1673569>`_
e193201fa1de

Add release note for CVE-2017-7214

https://github.com/openstack/novaMatt RiedemannMar 21, 2017via ghsa
commit
1 file changed · +8 −0
  • releasenotes/notes/bug-1673569-cve-2017-7214-2d7644b356015c93.yaml+8 −0 added
    @@ -0,0 +1,8 @@
+---
+prelude: >
+    This release includes fixes for security vulnerabilities.
+security:
+  - |
+    [CVE-2017-7214] Failed notification payload is dumped in logs with auth secrets
+
+    * `Bug 1673569 <https://bugs.launchpad.net/nova/+bug/1673569>`_
acb19160d4d3

Add release note for CVE-2017-7214

https://github.com/openstack/novaMatt RiedemannMar 21, 2017via ghsa
commit
1 file changed · +8 −0
  • releasenotes/notes/bug-1673569-cve-2017-7214-2d7644b356015c93.yaml+8 −0 added
    @@ -0,0 +1,8 @@
+---
+prelude: >
+    This release includes fixes for security vulnerabilities.
+security:
+  - |
+    [CVE-2017-7214] Failed notification payload is dumped in logs with auth secrets
+
+    * `Bug 1673569 <https://bugs.launchpad.net/nova/+bug/1673569>`_

Vulnerability mechanics

Synthesis attempt was rejected by the grounding validator. Re-run pending.

References

10

News mentions

0

No linked articles in our index yet.