Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/64953?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/64953?format=api", "vulnerability_id": "VCID-exm7-6mk4-8yg5", "summary": "The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.", "aliases": [ { "alias": "CVE-2014-7230" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/91416?format=api", "purl": "pkg:deb/debian/cinder@2014.1.3-4?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2014.1.3-4%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/91410?format=api", "purl": "pkg:deb/debian/cinder@2:17.0.1-1%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:17.0.1-1%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/91408?format=api", "purl": "pkg:deb/debian/cinder@2:21.3.1-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:21.3.1-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/91412?format=api", "purl": "pkg:deb/debian/cinder@2:26.0.0-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:26.0.0-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/91411?format=api", "purl": "pkg:deb/debian/cinder@2:28.0.0-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:28.0.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/119470?format=api", "purl": "pkg:deb/debian/nova@2014.1.3-5?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2014.1.3-5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/515714?format=api", "purl": "pkg:deb/debian/nova@2014.1.3-11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3hv9-1384-6kh3" }, { "vulnerability": "VCID-4eav-bw23-ebch" }, { "vulnerability": "VCID-6bmt-zgqg-5bdv" }, { "vulnerability": "VCID-6e9z-82qh-k7du" }, { "vulnerability": "VCID-6y85-ng53-17cb" }, { "vulnerability": "VCID-91rs-pwgf-qqdf" }, { "vulnerability": "VCID-f27e-cbx8-uufg" }, { "vulnerability": "VCID-gx84-4ww5-5bbk" }, { "vulnerability": "VCID-j8yh-hmtv-pkep" }, { "vulnerability": "VCID-kf2q-f6xj-w3ba" }, { "vulnerability": "VCID-nfqc-abt3-8fg1" }, { "vulnerability": "VCID-s4q3-njy1-qfcv" }, { "vulnerability": "VCID-sh4a-t179-67gp" }, { "vulnerability": "VCID-svtk-epku-sqe1" }, { "vulnerability": "VCID-svwh-x7fk-uye7" }, { "vulnerability": "VCID-uhcg-5qnj-wyf5" }, { "vulnerability": "VCID-wn3h-y5yh-bbb3" }, { "vulnerability": "VCID-wqfs-xtd4-6ufc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2014.1.3-11" }, { "url": "http://public2.vulnerablecode.io/api/packages/119428?format=api", "purl": "pkg:deb/debian/nova@2:22.0.1-2%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1p6r-bchy-pfdv" }, { "vulnerability": "VCID-gz88-fmm2-1yd7" }, { "vulnerability": "VCID-ttgr-j3ja-cbba" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:22.0.1-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/119426?format=api", "purl": "pkg:deb/debian/nova@2:26.2.2-1~deb12u4?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:26.2.2-1~deb12u4%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/119430?format=api", "purl": "pkg:deb/debian/nova@2:31.0.0-6%2Bdeb13u2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:31.0.0-6%252Bdeb13u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/119429?format=api", "purl": "pkg:deb/debian/nova@2:33.0.1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.1-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/121521?format=api", "purl": "pkg:deb/debian/openstack-trove@2014.1.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openstack-trove@2014.1.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/121520?format=api", "purl": "pkg:deb/debian/openstack-trove@1:18.0.0-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openstack-trove@1:18.0.0-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/121523?format=api", "purl": "pkg:deb/debian/openstack-trove@1:23.0.0-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openstack-trove@1:23.0.0-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/121522?format=api", "purl": "pkg:deb/debian/openstack-trove@1:25.0.0-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openstack-trove@1:25.0.0-1%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/515713?format=api", "purl": "pkg:deb/debian/nova@2012.1.1-18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sw8-mqn1-5kd4" }, { "vulnerability": "VCID-35bf-15nf-3qf7" }, { "vulnerability": "VCID-3hv9-1384-6kh3" }, { "vulnerability": "VCID-3mdx-vkyq-aye6" }, { "vulnerability": "VCID-4eav-bw23-ebch" }, { "vulnerability": "VCID-651x-xxw5-aqfu" }, { "vulnerability": "VCID-68rm-mxhr-cyhc" }, { "vulnerability": "VCID-6bmt-zgqg-5bdv" }, { "vulnerability": "VCID-6e9z-82qh-k7du" }, { "vulnerability": "VCID-6y85-ng53-17cb" }, { "vulnerability": "VCID-7dht-sw4x-nbhv" }, { "vulnerability": "VCID-91rs-pwgf-qqdf" }, { "vulnerability": "VCID-a198-s6ta-qfac" }, { "vulnerability": "VCID-a4ze-ras5-7qg5" }, { "vulnerability": "VCID-d4d4-83qf-dqbh" }, { "vulnerability": "VCID-du3s-2zt8-nuhm" }, { "vulnerability": "VCID-ef7v-8jwq-tqa9" }, { "vulnerability": "VCID-exm7-6mk4-8yg5" }, { "vulnerability": "VCID-f27e-cbx8-uufg" }, { "vulnerability": "VCID-gx84-4ww5-5bbk" }, { "vulnerability": "VCID-hdpu-1s8y-8qbu" }, { "vulnerability": "VCID-j8yh-hmtv-pkep" }, { "vulnerability": "VCID-jncy-ymrh-zfbx" }, { "vulnerability": "VCID-k4cx-1xsz-87fd" }, { "vulnerability": "VCID-k8vq-jwt2-n7ej" }, { "vulnerability": "VCID-kf2q-f6xj-w3ba" }, { "vulnerability": "VCID-m24k-x2sb-1fcx" }, { "vulnerability": "VCID-nfqc-abt3-8fg1" }, { "vulnerability": "VCID-nyfb-q4hf-dfht" }, { "vulnerability": "VCID-p72s-dqxc-gkcu" }, { "vulnerability": "VCID-rafk-kj3p-b7d4" }, { "vulnerability": "VCID-s4q3-njy1-qfcv" }, { "vulnerability": "VCID-sh4a-t179-67gp" }, { "vulnerability": "VCID-svtk-epku-sqe1" }, { "vulnerability": "VCID-svwh-x7fk-uye7" }, { "vulnerability": "VCID-syk2-9w15-ukdu" }, { "vulnerability": "VCID-uhcg-5qnj-wyf5" }, { "vulnerability": "VCID-v1j5-u7w9-1ydk" }, { "vulnerability": "VCID-vbzy-1amz-tyhb" }, { "vulnerability": "VCID-wn3h-y5yh-bbb3" }, { "vulnerability": "VCID-wqfs-xtd4-6ufc" }, { "vulnerability": "VCID-xrea-zh8g-4kcf" }, { "vulnerability": "VCID-z5ph-r2w9-eygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2012.1.1-18" }, { "url": "http://public2.vulnerablecode.io/api/packages/175653?format=api", "purl": "pkg:rpm/redhat/openstack-cinder@2014.1.3-1?arch=el6ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2k1s-rnhh-2bga" }, { "vulnerability": "VCID-exm7-6mk4-8yg5" }, { "vulnerability": "VCID-hr29-1k63-h7fp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-cinder@2014.1.3-1%3Farch=el6ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/175654?format=api", "purl": "pkg:rpm/redhat/openstack-cinder@2014.1.3-1?arch=el7ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2k1s-rnhh-2bga" }, { "vulnerability": "VCID-exm7-6mk4-8yg5" }, { "vulnerability": "VCID-hr29-1k63-h7fp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-cinder@2014.1.3-1%3Farch=el7ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/175655?format=api", "purl": "pkg:rpm/redhat/openstack-nova@2014.1.3-4?arch=el6ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-exm7-6mk4-8yg5" }, { "vulnerability": "VCID-gec7-vkxj-wfch" }, { "vulnerability": "VCID-hr29-1k63-h7fp" }, { "vulnerability": "VCID-v1j5-u7w9-1ydk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-nova@2014.1.3-4%3Farch=el6ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/175656?format=api", "purl": "pkg:rpm/redhat/openstack-nova@2014.1.3-4?arch=el7ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-exm7-6mk4-8yg5" }, { "vulnerability": "VCID-gec7-vkxj-wfch" }, { "vulnerability": "VCID-hr29-1k63-h7fp" }, { "vulnerability": "VCID-v1j5-u7w9-1ydk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-nova@2014.1.3-4%3Farch=el7ost" }, { "url": "http://public2.vulnerablecode.io/api/packages/175956?format=api", "purl": "pkg:rpm/redhat/openstack-trove@2014.1.3-1?arch=el7ost", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-exm7-6mk4-8yg5" }, { "vulnerability": "VCID-hr29-1k63-h7fp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-trove@2014.1.3-1%3Farch=el7ost" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7230.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-7230.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-7230", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.30913", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.3098", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.30947", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.30914", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.30882", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-7230" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7230", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7230" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1147722", "reference_id": "1147722", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1147722" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765704", "reference_id": "765704", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765704" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765714", "reference_id": "765714", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765714" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1939", "reference_id": "RHSA-2014:1939", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1939" }, { "reference_url": "https://usn.ubuntu.com/2405-1/", "reference_id": "USN-2405-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2405-1/" }, { "reference_url": "https://usn.ubuntu.com/2407-1/", "reference_id": "USN-2407-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2407-1/" } ], "weaknesses": [ { "cwe_id": 184, "name": "Incomplete List of Disallowed Inputs", "description": "The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses." }, { "cwe_id": 532, "name": "Insertion of Sensitive Information into Log File", "description": "Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information." }, { "cwe_id": 522, "name": "Insufficiently Protected Credentials", "description": "The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval." } ], "exploits": [], "severity_range_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-exm7-6mk4-8yg5" }