Linux Distros Unpatched Vulnerability : CVE-2018-10898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in...

TencentOS Server 4: openstack-heat (TSSA-2024:0810)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0810 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2022-36911

A cross-site request forgery CSRF vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2022-36912

A missing permission check in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

Linux Distros Unpatched Vulnerability : CVE-2023-1625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal paramete...

RHEL 7 : openstack-heat (RHSA-2017:1450)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1450 advisory. OpenStack Orchestration heat is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. Th...

RHSA-2014:1687 Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2014:0090 Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2017:1456 Red Hat Security Advisory: openstack-heat security and bug fix update

Bulletin has no description...

RHSA-2017:1450 Red Hat Security Advisory: openstack-heat security and bug fix update

Bulletin has no description...

RHSA-2017:1243 Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2016:0440 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

RHSA-2016:0441 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

RHSA-2016:0442 Red Hat Security Advisory: openstack-heat security advisory

Bulletin has no description...

RHSA-2016:0266 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

Sensitive Information Disclosure

openstack-heat is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the stack abandon command with the hidden feature set to True by which an attacker can disclose sensitive information...

DEBIAN-CVE-2024-7319

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

UBUNTU-CVE-2024-7319

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

CVE-2024-7319 Openstack-heat: incomplete fix for cve-2023-1625

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

CVE-2024-7319

CVE-2024-7319 arises from an incomplete fix for CVE-2023-1625 in OpenStack Heat. The vulnerability could allow sensitive information to be disclosed via the OpenStack stack abandon command when the hidden feature remains enabled, even if the CVE-2023-1625 fix is applied. The connected documents c...