Skip to content

PatchFirst · Latest vulnerabilities

openstack-trove vulnerabilities

Vulnerabilities published for openstack-trove in the last 30 days: 0. Listed in the KEV catalogue: 0.

Vulnerabilities: 2

CVE-2015-3156
Medium · CVSS 5.5EPSS 0.46%No fix published
CVE-2015-3156
The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategie
openstack-trove Operating systems
Published August 11, 2017Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-7230
Not ratedEPSS 0.49%Fix available
CVE-2014-7230
The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.
openstack-trove Operating systems
- Update to 2014.1.3-1
Published October 8, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →