CVE-2015-8749 in Computeinfo

Summary

The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading log files or other unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

01/07/2016

Disclosure

01/15/2016

CPE

ready

CVSS

6.7

EPSS

0.00942

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!