GitHub Advisoryadvisory · PyPI

GHSA-5836-grcc-8j89 OpenStack Heat information leak vulnerability

HIGH Published 2023-09-24 Modified 2023-09-25 Official page ↗
Aliases
CVE-2023-1625
Ecosystem
PyPI
Packages
openstack-heat
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-200
Reviewed
2023-09-25

Affected packages

• PyPI openstack-heat: < 20.0.0 → fixed in 20.0.0

Description

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

Related

Alias · CVE (1)

  • CVE-2023-1625 An information leak was discovered in OpenStack heat. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References