9 matches found
EUVD-2022-3128
Malicious code in bioql PyPI...
Information Disclosure
openstack-heat is vulnerable to information disclosure attacks. The vulnerability exists as OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL...
openstack-heat: authenticated information leak in Heat
It was discovered that a user could temporarily be able to see the URL of a provider template used in another tenant. If the template itself could be accessed, then additional information could be leaked that would otherwise not be visible...
CVE-2014-3801
OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...
DEBIAN-CVE-2014-3801
OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...
CVE-2014-3801
OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...
PT-2014-5509
Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions 2013.2 through 2013.2.3 OpenStack Orchestration API Heat version 2014.1 Description The issue allows remote authenticated users to obtain the provider template URL via the resource-type-list. This can...
CVE-2014-3801: Exposure of Sensitive Information to an Unauthorized Actor
OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...
CVE-2014-3801
OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...