GitHub Advisoryadvisory · PyPI

GHSA-86qj-4h55-fvpw OpenStack Heat template URL information leakage

LOW Published 2022-05-14 Modified 2023-12-07 Official page ↗
Aliases
CVE-2014-3801
Ecosystem
PyPI
Packages
openstack-heat
Severity
Low
Weaknesses
CWE-200
Reviewed
2023-12-07

Affected packages

• PyPI openstack-heat: < 5.0.0a0 → fixed in 5.0.0a0

Description

OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

Related

Alias · CVE (1)

  • CVE-2014-3801 OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template,… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References