CVE-2017-7214 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-7214 Interim 1 12 2023-12-08T01:33:37Z current 2021-05-30T13:54:17Z 2023-12-08T01:33:37Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-7214 An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-May/002926.html E-Mail link for SUSE-SU-2017:1443-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Cloud 5 SUSE Cloud for SLE 12 Compute Nodes SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 openstack-ceilometer-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 openstack-ceilometer-api-7.0.4~a0~dev7-3.1 openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 openstack-cinder-9.1.5~a0~dev1-3.1 openstack-cinder-api-9.1.5~a0~dev1-3.1 openstack-cinder-backup-9.1.5~a0~dev1-3.1 openstack-cinder-doc-9.1.5~a0~dev1-3.1 openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 openstack-cinder-volume-9.1.5~a0~dev1-3.1 openstack-dashboard-10.0.4~a0~dev2-3.1 openstack-glance-13.0.1~a0~dev6-3.1 openstack-glance-api-13.0.1~a0~dev6-3.1 openstack-glance-doc-13.0.1~a0~dev6-3.3 openstack-glance-glare-13.0.1~a0~dev6-3.1 openstack-glance-registry-13.0.1~a0~dev6-3.1 openstack-heat-7.0.4~a0~dev4-4.1 openstack-heat-api-7.0.4~a0~dev4-4.1 openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 openstack-heat-doc-7.0.4~a0~dev4-4.2 openstack-heat-engine-7.0.4~a0~dev4-4.1 openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 openstack-heat-test-7.0.4~a0~dev4-4.1 openstack-keystone-10.0.2~a0~dev2-6.1 openstack-keystone-doc-10.0.2~a0~dev2-6.2 openstack-magnum-3.1.2~a0~dev22-13.1 openstack-magnum-api-3.1.2~a0~dev22-13.1 openstack-magnum-conductor-3.1.2~a0~dev22-13.1 openstack-magnum-doc-3.1.2~a0~dev22-13.1 openstack-manila-3.0.1~a0~dev27-3.1 openstack-manila-api-3.0.1~a0~dev27-3.1 openstack-manila-data-3.0.1~a0~dev27-3.1 openstack-manila-doc-3.0.1~a0~dev27-3.1 openstack-manila-scheduler-3.0.1~a0~dev27-3.1 openstack-manila-share-3.0.1~a0~dev27-3.1 openstack-nova openstack-nova-14.0.6~a0~dev16-3.1 openstack-nova-api openstack-nova-api-14.0.6~a0~dev16-3.1 openstack-nova-cells openstack-nova-cells-14.0.6~a0~dev16-3.1 openstack-nova-cert openstack-nova-cert-14.0.6~a0~dev16-3.1 openstack-nova-compute openstack-nova-compute-14.0.6~a0~dev16-3.1 openstack-nova-conductor openstack-nova-conductor-14.0.6~a0~dev16-3.1 openstack-nova-console openstack-nova-console-14.0.6~a0~dev16-3.1 openstack-nova-consoleauth openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 openstack-nova-doc-14.0.6~a0~dev16-3.3 openstack-nova-novncproxy openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 openstack-nova-objectstore openstack-nova-placement-api-14.0.6~a0~dev16-3.1 openstack-nova-scheduler openstack-nova-scheduler-14.0.6~a0~dev16-3.1 openstack-nova-serialproxy openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 openstack-nova-vncproxy openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 python-ceilometer-7.0.4~a0~dev7-3.1 python-cinder-9.1.5~a0~dev1-3.1 python-glance-13.0.1~a0~dev6-3.1 python-heat-7.0.4~a0~dev4-4.1 python-horizon-10.0.4~a0~dev2-3.1 python-keystone-10.0.2~a0~dev2-6.1 python-magnum-3.1.2~a0~dev22-13.1 python-manila-3.0.1~a0~dev27-3.1 python-nova python-nova-14.0.6~a0~dev16-3.1 openstack-ceilometer-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-api-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-api-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-backup-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-doc-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-volume-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-dashboard-10.0.4~a0~dev2-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-api-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-doc-13.0.1~a0~dev6-3.3 as a component of SUSE OpenStack Cloud 7 openstack-glance-glare-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-registry-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-doc-7.0.4~a0~dev4-4.2 as a component of SUSE OpenStack Cloud 7 openstack-heat-engine-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-test-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-keystone-10.0.2~a0~dev2-6.1 as a component of SUSE OpenStack Cloud 7 openstack-keystone-doc-10.0.2~a0~dev2-6.2 as a component of SUSE OpenStack Cloud 7 openstack-magnum-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-api-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-conductor-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-doc-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-api-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-data-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-doc-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-scheduler-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-share-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-api-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-cells-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-cert-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-compute-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-conductor-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-console-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-doc-14.0.6~a0~dev16-3.3 as a component of SUSE OpenStack Cloud 7 openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-placement-api-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-scheduler-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 python-ceilometer-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 python-cinder-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 python-glance-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 python-heat-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 python-horizon-10.0.4~a0~dev2-3.1 as a component of SUSE OpenStack Cloud 7 python-keystone-10.0.2~a0~dev2-6.1 as a component of SUSE OpenStack Cloud 7 python-magnum-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 python-manila-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 python-nova-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova as a component of SUSE Cloud 5 openstack-nova as a component of SUSE Cloud for SLE 12 Compute Nodes openstack-nova as a component of SUSE OpenStack Cloud 6 openstack-nova-api as a component of SUSE OpenStack Cloud 6 openstack-nova-cells as a component of SUSE OpenStack Cloud 6 openstack-nova-cert as a component of SUSE OpenStack Cloud 6 openstack-nova-compute as a component of SUSE OpenStack Cloud 6 openstack-nova-conductor as a component of SUSE OpenStack Cloud 6 openstack-nova-console as a component of SUSE OpenStack Cloud 6 openstack-nova-consoleauth as a component of SUSE OpenStack Cloud 6 openstack-nova-novncproxy as a component of SUSE OpenStack Cloud 6 openstack-nova-objectstore as a component of SUSE OpenStack Cloud 6 openstack-nova-scheduler as a component of SUSE OpenStack Cloud 6 openstack-nova-serialproxy as a component of SUSE OpenStack Cloud 6 openstack-nova-vncproxy as a component of SUSE OpenStack Cloud 6 python-nova as a component of SUSE OpenStack Cloud 6 An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens. CVE-2017-7214 SUSE OpenStack Cloud 7:openstack-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-api-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 SUSE OpenStack Cloud 7:openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-api-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-backup-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-doc-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-volume-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-dashboard-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:openstack-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-api-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-doc-13.0.1~a0~dev6-3.3 SUSE OpenStack Cloud 7:openstack-glance-glare-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-registry-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-doc-7.0.4~a0~dev4-4.2 SUSE OpenStack Cloud 7:openstack-heat-engine-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-test-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:openstack-keystone-doc-10.0.2~a0~dev2-6.2 SUSE OpenStack Cloud 7:openstack-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-api-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-conductor-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-doc-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-nova-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-console-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.6~a0~dev16-3.3 SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:python-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:python-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:python-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:python-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:python-horizon-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:python-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:python-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:python-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:python-nova-14.0.6~a0~dev16-3.1 SUSE Cloud 5:openstack-nova SUSE Cloud for SLE 12 Compute Nodes:openstack-nova SUSE OpenStack Cloud 6:openstack-nova SUSE OpenStack Cloud 6:openstack-nova-api SUSE OpenStack Cloud 6:openstack-nova-cells SUSE OpenStack Cloud 6:openstack-nova-cert SUSE OpenStack Cloud 6:openstack-nova-compute SUSE OpenStack Cloud 6:openstack-nova-conductor SUSE OpenStack Cloud 6:openstack-nova-console SUSE OpenStack Cloud 6:openstack-nova-consoleauth SUSE OpenStack Cloud 6:openstack-nova-novncproxy SUSE OpenStack Cloud 6:openstack-nova-objectstore SUSE OpenStack Cloud 6:openstack-nova-scheduler SUSE OpenStack Cloud 6:openstack-nova-serialproxy SUSE OpenStack Cloud 6:openstack-nova-vncproxy SUSE OpenStack Cloud 6:python-nova low 3.5 AV:N/AC:M/Au:S/C:P/I:N/A:N 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H