Every CVE Search/ Get API key

CVE-2017-7214

OpenStack Nova logs sensitive context from notification exceptions

9.8 CriticalFix available

CVE-2017-7214 is a critical vulnerability (CVSS 9.8) in Openstack Nova, published March 21, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in nova 13.1.4.

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.30%Up 1.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
CVE-2017-7214
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-532
Updated
2026-11-02
CVE List No score

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
CVE-2017-7214
Updated
2026-11-02
EUVDEUVD-2022-3685 No score

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
EUVD-2022-3685
Updated
2026-11-03
GitHub AdvisoriesGHSA-f4g4-cj8f-3cr9 9.8

OpenStack Nova logs sensitive context from notification exceptions

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
GHSA-f4g4-cj8f-3cr9
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-532
Updated
2026-11-02
OSV 9.8

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
CVE-2017-7214
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-7214 9.8

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
DEBIAN-CVE-2017-7214
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVGHSA-f4g4-cj8f-3cr9 9.8

OpenStack Nova logs sensitive context from notification exceptions

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
GHSA-f4g4-cj8f-3cr9
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-532
Updated
2026-11-02
OSVPYSEC-2026-432 9.8

OpenStack Nova logs sensitive context from notification exceptions

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
PYSEC-2026-432
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:1508 6.1

Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Record
RHSA-2017:1508
CVSS 3.0
6.1 MediumCVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2017:1595 6.1

Red Hat Security Advisory: openstack-nova and python-novaclient security, bug fix, and enhancement update

Record
RHSA-2017:1595
CVSS 3.0
6.1 MediumCVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2017-7214 9.8

An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.

Record
UBUNTU-CVE-2017-7214
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2017:1443-1 No score

Security update for several openstack-components

This update for openstack-ceilometer, -cinder, -dashboard, -glance, -heat, -keystone, -manila, -magnum and -novaopenstack-keystone provides the latest code from OpenStack Newton.

  • nova: Add release note that legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens. (bsc#1030406, CVE-2017-7214)
  • nova: Remove PrivTmp from openstack-nova-compute service. (bsc#1024328)
  • dashboard: Remove dangerous safestring declaration. (bsc#1032322, CVE-2017-7400)
Record
SUSE-SU-2017:1443-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nova
PyPI
 13.0.0 up to 13.1.4
13.1.4
nova
PyPI
 14.0.0 up to 14.0.5
14.0.5
nova
PyPI
 15.0.1 up to 15.0.2
15.0.2
nova
Debian:12
 before 2:14.0.0-4
2:14.0.0-4
nova
Debian:13
 before 2:14.0.0-4
2:14.0.0-4
nova
Debian:14
 before 2:14.0.0-4
2:14.0.0-4
nova
PyPI
 13.0.0 up to 13.1.4, 14.0.0 up to 14.0.5, 15.0.1 up to 15.0.2
13.1.414.0.515.0.2
openstack-nova
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-api
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-cells
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
Show 48 moreShow less
Affected packages
PackageAffectedFixed
openstack-nova-cert
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-common
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-compute
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-conductor
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-console
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-migration
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-network
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-novncproxy
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-scheduler
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-serialproxy
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
openstack-nova-spicehtml5proxy
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
python-nova
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
python-nova-tests
Red Hat:openstack:9::el7
 before 1:13.1.4-1.el7ost
1:13.1.4-1.el7ost
python-novaclient
Red Hat:openstack:10::el7
 before 1:6.0.0-3.el7ost
1:6.0.0-3.el7ost
openstack-nova
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-api
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-cells
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-cert
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-common
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-compute
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-conductor
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-console
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-migration
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-network
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-novncproxy
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-placement-api
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-scheduler
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-serialproxy
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-nova-spicehtml5proxy
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
python-nova
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
python-nova-tests
Red Hat:openstack:10::el7
 before 1:14.0.6-2.el7ost
1:14.0.6-2.el7ost
openstack-ceilometer
SUSE:OpenStack Cloud 7
 before 7.0.4~a0~dev7-3.1
7.0.4~a0~dev7-3.1
openstack-ceilometer-doc
SUSE:OpenStack Cloud 7
 before 7.0.4~a0~dev7-3.2
7.0.4~a0~dev7-3.2
openstack-cinder
SUSE:OpenStack Cloud 7
 before 9.1.5~a0~dev1-3.1
9.1.5~a0~dev1-3.1
openstack-cinder-doc
SUSE:OpenStack Cloud 7
 before 9.1.5~a0~dev1-3.1
9.1.5~a0~dev1-3.1
openstack-dashboard
SUSE:OpenStack Cloud 7
 before 10.0.4~a0~dev2-3.1
10.0.4~a0~dev2-3.1
openstack-glance
SUSE:OpenStack Cloud 7
 before 13.0.1~a0~dev6-3.1
13.0.1~a0~dev6-3.1
openstack-glance-doc
SUSE:OpenStack Cloud 7
 before 13.0.1~a0~dev6-3.3
13.0.1~a0~dev6-3.3
openstack-heat
SUSE:OpenStack Cloud 7
 before 7.0.4~a0~dev4-4.1
7.0.4~a0~dev4-4.1
openstack-heat-doc
SUSE:OpenStack Cloud 7
 before 7.0.4~a0~dev4-4.2
7.0.4~a0~dev4-4.2
openstack-keystone
SUSE:OpenStack Cloud 7
 before 10.0.2~a0~dev2-6.1
10.0.2~a0~dev2-6.1
openstack-keystone-doc
SUSE:OpenStack Cloud 7
 before 10.0.2~a0~dev2-6.2
10.0.2~a0~dev2-6.2
openstack-magnum
SUSE:OpenStack Cloud 7
 before 3.1.2~a0~dev22-13.1
3.1.2~a0~dev22-13.1
openstack-magnum-doc
SUSE:OpenStack Cloud 7
 before 3.1.2~a0~dev22-13.1
3.1.2~a0~dev22-13.1
openstack-manila
SUSE:OpenStack Cloud 7
 before 3.0.1~a0~dev27-3.1
3.0.1~a0~dev27-3.1
openstack-manila-doc
SUSE:OpenStack Cloud 7
 before 3.0.1~a0~dev27-3.1
3.0.1~a0~dev27-3.1
openstack-nova
SUSE:OpenStack Cloud 7
 before 14.0.6~a0~dev16-3.1
14.0.6~a0~dev16-3.1
openstack-nova-doc
SUSE:OpenStack Cloud 7
 before 14.0.6~a0~dev16-3.3
14.0.6~a0~dev16-3.3

History

History
WhenChangedSources
2026-11-03affected
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open