The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.

Michael Scherer of Red Hat reported multiple issues in OpenStack Trove where temporary files are used in an insecure way in different modules:

trove: MongoDB datastore module in guestagent insecure /tmp file usage in writeconfig() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/mongodb/service.py#L176

trove: PostgreSQL datastore module in guestagent insecure /tmp file usage in resetconfiguration() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/postgresql/service/config.py#L70

trove: Redis datastore module in guestagent insecure /tmp file usage in writeconfig() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/redis/service.py#L236

trove: MySQL datastore module in guestagent insecure /tmp file usage in writemycnf() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/mysql/service.py#L790

trove: MySQL restore strategy in guestagent insecure /tmp file usage in InnoBackupEx::runprepare() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/restore/mysqlimpl.py#L194

trove: MySQL backup strategy in guestagent insecure /tmp file usage in InnoBackupEx::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L55

trove: MySQL backup strategy in guestagent insecure /tmp file usage in MySQLDump::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L36

trove: MySQL backup strategy in guestagent insecure /tmp file usage in InnoBackupExIncremental::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L110

trove: Cassandra datastore module insecure /tmp file usage in getactualdbstatus() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/system.py#L33 https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/service.py#L230

trove: Couchbase backup strategy insecure /tmp file usage in multiple class CbBackup methods https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/experimental/couchbaseimpl.py#L30

The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.