The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading log files or other unspecified vectors.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2016-01-15T19:00:00

Updated: 2024-08-06T08:29:21.589Z

Reserved: 2016-01-07T00:00:00

Link: CVE-2015-8749

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2016-01-15T19:59:04.133

Modified: 2024-11-21T02:39:06.043

Link: CVE-2015-8749

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-01-07T00:00:00Z

Links: CVE-2015-8749 - Bugzilla