Openstack Trove vulnerabilities

3 CVEs affecting Openstack Trove, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3156, published 2017-08-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-7231, published 2014-10-08. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands,…
CVE-2014-7230, published 2014-10-08. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a…
CVE-2015-3156, published 2017-08-11. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py,…