Launchpad.net

CVE 2014-5037

Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log.

See the CVE page on Mitre.org for more details.

References