Lucene search
K

126 matches found

OSV
OSV
added 2024/09/13 10:39 a.m.8 views

RHSA-2016:0440 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

5.5CVSS5.3AI score0.01217EPSS
Exploits0References8
OSV
OSV
added 2024/09/13 10:39 a.m.11 views

RHSA-2016:0441 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

5.5CVSS5.3AI score0.01217EPSS
Exploits0References8
OSV
OSV
added 2024/09/13 10:39 a.m.10 views

RHSA-2016:0442 Red Hat Security Advisory: openstack-heat security advisory

Bulletin has no description...

5.5CVSS5.3AI score0.01217EPSS
Exploits0References7
OSV
OSV
added 2024/09/13 10:39 a.m.15 views

RHSA-2016:0266 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

5.5CVSS5.3AI score0.01217EPSS
Exploits0References20
Veracode
Veracode
added 2024/08/27 9:44 a.m.11 views

Sensitive Information Disclosure

openstack-heat is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the stack abandon command with the hidden feature set to True by which an attacker can disclose sensitive information...

5CVSS6.4AI score0.00392EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/08/02 9:16 p.m.1 views

DEBIAN-CVE-2024-7319

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

5CVSS5.4AI score0.00392EPSS
Exploits1References1
OSV
OSV
added 2024/08/02 9:16 p.m.0 views

UBUNTU-CVE-2024-7319

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

5CVSS5.7AI score0.00392EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/08/02 8:36 p.m.17 views

CVE-2024-7319 Openstack-heat: incomplete fix for cve-2023-1625

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

5CVSS6.7AI score0.00392EPSS
Exploits1References2
CVE
CVE
added 2024/08/02 8:36 p.m.61 views

CVE-2024-7319

CVE-2024-7319 arises from an incomplete fix for CVE-2023-1625 in OpenStack Heat. The vulnerability could allow sensitive information to be disclosed via the OpenStack stack abandon command when the hidden feature remains enabled, even if the CVE-2023-1625 fix is applied. The connected documents c...

5CVSS7.5AI score0.00392EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.2 views

OpenStack Heat 信息泄露漏洞

OpenStack Heat is an OpenStack open source service. Composite cloud applications are orchestrated using a declarative template format via the OpenStack native REST API. A security vulnerability exists in OpenStack Heat that stems from the presence of sensitive information disclosure issues...

5CVSS4.8AI score0.00392EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.17 views

RHEL 6 : openstack-heat (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - openstack-heat: Template source URL allows network port scan CVE-2016-9185 Note that Nessus has not tested for this...

5CVSS4.6AI score0.00527EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.18 views

RHEL 6 : openstack-heat (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - openstack-heat: Template source URL allows network port scan CVE-2016-9185 Note that Nessus has not tested for this...

4.8AI score0.00527EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/24 1:15 a.m.2 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS5.9AI score0.00111EPSS
Exploits1References5
NVD
NVD
added 2023/09/24 1:15 a.m.12 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS7.2AI score0.00111EPSS
Exploits1References4
OSV
OSV
added 2023/09/24 1:15 a.m.1 views

DEBIAN-CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

5CVSS6.1AI score0.00111EPSS
Exploits1References1
Prion
Prion
added 2023/09/24 1:15 a.m.21 views

Stack overflow

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

4CVSS4.7AI score0.00111EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/24 12:8 a.m.13 views

CVE-2023-1625 Information leak in api

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS6.3AI score0.00111EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/08/17 12:0 a.m.12 views

Ubuntu: Security Advisory (USN-6293-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS5.2AI score0.00111EPSS
Exploits1References2
OSV
OSV
added 2023/08/16 12:17 p.m.3 views

USN-6293-1 heat vulnerability

It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data...

7.4CVSS5.8AI score0.00111EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/08/16 12:0 a.m.26 views

Ubuntu 22.04 LTS : OpenStack Heat vulnerability (USN-6293-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6293-1 advisory. It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain...

7.4CVSS6.3AI score0.00111EPSS
Exploits1References2
Rows per page
Query Builder