{"id":"CVE-2014-5038","aliases":["EUVD-2014-4937","GHSA-38vw-2crj-2w79"],"status":"published","title":"Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system...","description":"Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00352,"percentile":0.28996,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2014-11-07T19:00:00Z","modified":"2026-06-17T00:10:58Z","products":[{"vendor":"eucalyptus","product":"eucalyptus"}],"references":[{"url":"https://www.eucalyptus.com/resources/security/advisories/esa-26","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5038"},{"url":"https://github.com/advisories/GHSA-38vw-2crj-2w79"}],"sources":{"cve":[{"id":"CVE-2014-5038","description":"Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files.","status":"published","published":"2014-11-07T19:00:00Z","modified":"2024-08-06T11:34:37.291Z","updated_at":"2026-11-02T14:33:41.889751Z"}],"euvd":[{"id":"EUVD-2014-4937","description":"Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files.","status":"published","published":"2014-11-07T19:00:00Z","modified":"2024-08-06T11:34:37Z","updated_at":"2026-11-03T01:57:04.299217Z"}],"ghsa":[{"id":"GHSA-38vw-2crj-2w79","title":"Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system...","description":"Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files.","status":"published","published":"2022-05-17T04:29:49Z","modified":"2023-01-28T05:01:55Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:43:40.278628Z"}],"nvd":[{"id":"CVE-2014-5038","description":"Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files.","status":"published","published":"2014-11-07T19:55:03.793Z","modified":"2026-06-17T00:10:58.167Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:57.304171Z"}]}}