EUVD-2022-2957

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

OpenStack Magnum exposes credentials in Heat templates, enabling full API access to instances.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2016-7404	21 Jun 201918:29	–	circl
CNVD	OpenStack Magnum Security Bypass Vulnerability	26 May 201700:00	–	cnvd
CVE	CVE-2016-7404	21 Jun 201913:17	–	cve
Cvelist	CVE-2016-7404	21 Jun 201913:17	–	cvelist
Debian CVE	CVE-2016-7404	21 Jun 201913:17	–	debiancve
Github Security Blog	Openstack Magnum Unsafe Credential Handling	24 May 202216:48	–	github
NVD	CVE-2016-7404	21 Jun 201914:15	–	nvd
OSV	DEBIAN-CVE-2016-7404	21 Jun 201914:15	–	osv
OSV	GHSA-793V-R35J-9RP9 Openstack Magnum Unsafe Credential Handling	24 May 202216:48	–	osv
OSV	SUSE-SU-2017:1233-1 Security update for openstack-magnum	10 May 201709:30	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "af4d0940-a9d7-3803-8fa8-97adf17e4143",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "49b3df25-9195-38bd-84d9-b80e6b3e9662",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-7404
github	www.github.com/openstack/magnum/commit/e93d82e8b3bc19211efd54edc17aebdca50670c1
bugs	www.bugs.launchpad.net/magnum/+bug/1620536
bugzilla	www.bugzilla.suse.com/show_bug.cgi
github	www.github.com/openstack/magnum
opendev	www.opendev.org/openstack/magnum/commit/0bb0d6486d6771ee21bbf897a091b1aa59e01b22
web	www.web.archive.org/web/20210124052053/https://www.securityfocus.com/bid/98467
suse	www.suse.com/security/cve/CVE-2016-7404.html

03 Oct 2025 20:07Current

9.3High risk

Vulners AI Score9.3

CVSS 39.8

CVSS 27.5

EPSS0.00329