[OSSA-2017-002] Nova logs sensitive context from notification exceptions (CVE-2017-7214)
OSSA-2017-002: Nova logs sensitive context from notification
Matt Riedemann with Huawei reported a vulnerability in Nova. Legacy
notification exception contexts appearing in ERROR level logs may
include sensitive information such as account passwords and
authorization tokens. All Nova setups are affected.