Lucene search
+L

454 matches found

OSV
OSV
added 2023/09/24 3:30 a.m.25 views

GHSA-5836-GRCC-8J89 OpenStack Heat information leak vulnerability

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS5.7AI score0.00715EPSS
SaveExploits1References6
OSV
OSV
added 2023/09/24 1:15 a.m.3 views

DEBIAN-CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

5CVSS6.1AI score0.00715EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/24 1:15 a.m.32 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS7.2AI score0.00715EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/24 1:15 a.m.6 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS5.9AI score0.00715EPSS
SaveExploits1References5
Prion
Prion
added 2023/09/24 1:15 a.m.25 views

Stack overflow

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

4CVSS4.7AI score0.00715EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/09/24 12:08 a.m.23 views

CVE-2023-1625 Information leak in api

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS6.7AI score
SaveExploits0References8
Cvelist
Cvelist
added 2023/09/24 12:08 a.m.57 views

CVE-2023-1625 Information leak in api

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS7.3AI score0.00715EPSS
SaveExploits1References4
CVE
CVE
added 2023/09/24 12:08 a.m.126 views

CVE-2023-1625

CVE-2023-1625 affects OpenStack Heat. A disclosed information leak allows a remote, authenticated attacker to use the stack show command to reveal otherwise hidden parameters. Impact is described as low for confidentiality and low for other aspects, with exploitation tied to OpenStack Heat behavi...

7.4CVSS5.8AI score0.00715EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/24 12:08 a.m.14 views

CVE-2023-1625 Information leak in api

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS6.3AI score0.00715EPSS
SaveExploits1References4
Wired Threat Level
Wired Threat Level
added 2023/08/31 7:32 p.m.24 views

Apple's Decision to Kill Its CSAM Photo-Scanning Tool Sparks Fresh Controversy

Child safety group Heat Initiative plans to launch a campaign pressing Apple on child sexual abuse material scanning and user reporting. The company issued a rare, detailed response on Thursday...

7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/08/17 12:00 a.m.14 views

Ubuntu: Security Advisory (USN-6293-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS5.2AI score0.00715EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2023/08/16 12:17 p.m.60 views

USN-6293-1: OpenStack Heat vulnerability

It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data...

7.4CVSS6.4AI score0.00715EPSS
SaveExploits1
OSV
OSV
added 2023/08/16 12:17 p.m.14 views

USN-6293-1 heat vulnerability

It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data...

7.4CVSS5.8AI score0.00715EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/08/16 12:00 a.m.27 views

Ubuntu 22.04 LTS : OpenStack Heat vulnerability (USN-6293-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6293-1 advisory. It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain...

7.4CVSS6.3AI score0.00715EPSS
SaveExploits1References2
Malwarebytes
Malwarebytes
added 2023/06/12 3:00 a.m.25 views

Strava heatmap loophole may reveal users' home addresses

Researchers at NC State University have outlined potential privacy issues with popular fitness app Strava which could lead to users' homes being pinpointed. The researchers' findings are detailed in a paper called Heat marks the spot: de-anonymising users' geographical data on the Strava heat map...

6.8AI score
SaveExploits0
OSV
OSV
added 2023/06/05 2:39 p.m.10 views

SUSE-SU-2023:2379-1 Security update for openstack-heat, python-Werkzeug

This update for openstack-heat, python-Werkzeug contains the following fixes: Security fixes included on this update: openstack-heat: - CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment. bsc1209774 python-Werkzeug: - CVE-2023-25577:...

7.5CVSS7.5AI score0.0142EPSS
SaveExploits1References5
OSV
OSV
added 2023/06/05 2:38 p.m.12 views

SUSE-SU-2023:2378-1 Security update for openstack-heat, openstack-swift, python-Werkzeug

This update for openstack-heat, openstack-swift, python-Werkzeug contains the following fixes: Security fixes included in this update: openstack-heat: - CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment bsc1209774. openstack-swift: -...

7.5CVSS6.9AI score0.0142EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2023/05/13 12:00 a.m.33 views

Ubuntu 18.04 LTS / 20.04 LTS : OpenStack Heat vulnerability (USN-6066-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6066-1 advisory. It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue t...

7.4CVSS6.3AI score0.00715EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/05/11 12:00 a.m.14 views

Ubuntu: Security Advisory (USN-6066-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS5.2AI score0.00715EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/05/11 12:00 a.m.10 views

OpenStack 安全漏洞

OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA. A security vulnerability exists in OpenStack Heat. An authenticated remote user exploiting the vulnerability could gain access to sensitive data...

7.4CVSS6.4AI score0.00715EPSS
SaveExploits1References7
Rows per page
Query Builder