7.4
High
CVE-2023-1625 An information leak was discovered in OpenStack heat
Description
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack-heat | Versions not published | |
| Red Hat OpenStack Platform 13 (Queens) | Versions not published | |
| Red Hat OpenStack Platform 16.1 | Versions not published | |
| Red Hat OpenStack Platform 16.2 | Versions not published | |
| Red Hat OpenStack Platform 17.0 | Versions not published | |
| OpenStack RDO | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2181621 bugzilla.redhat.com
- github.com github.com
- launchpad.net launchpad.net
Timeline
- Published
- Last modified