Information Disclosure

2022-06-0200:41:54

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

22.9%

JSON

openstack-tripleo-heat-templates is vulnerable to information disclosure. The vulnerability exists due to lack of santization allowing an attacker to discover the internal IP or hostname through the www_authenticate_uri parameter configuration files.

CPENameOperatorVersion
openstack-tripleo-heat-templateseq10.6.2__0.20190913130451.e95a183.el8ost
openstack-tripleo-heat-templateseq11.3.2__1.20210104205664.el8ost.2
openstack-tripleo-heat-templateseq11.6.0__1.el8
openstack-tripleo-heat-templateseq11.3.2__0.20200131125640.cc909b6.el8ost
openstack-tripleo-heat-templateseq11.5.1__2.20210603174823.el8ost.9
openstack-tripleo-heat-templateseq10.6.3__0.20200113185561.cf467ea.el8ost
openstack-tripleo-heat-templateseq11.3.2__1.20210408163453.el8ost
openstack-tripleo-heat-templateseq11.3.2__1.20200914170156.el8ost
openstack-tripleo-heat-templateseq11.4.0__1.el8
openstack-tripleo-heat-templateseq11.3.2__1.20210720153316.el8ost

Name	Operator	Version
openstack-tripleo-heat-templates	eq	10.6.2__0.20190913130451.e95a183.el8ost
openstack-tripleo-heat-templates	eq	11.3.2__1.20210104205664.el8ost.2
openstack-tripleo-heat-templates	eq	11.6.0__1.el8
openstack-tripleo-heat-templates	eq	11.3.2__0.20200131125640.cc909b6.el8ost
openstack-tripleo-heat-templates	eq	11.5.1__2.20210603174823.el8ost.9
openstack-tripleo-heat-templates	eq	10.6.3__0.20200113185561.cf467ea.el8ost
openstack-tripleo-heat-templates	eq	11.3.2__1.20210408163453.el8ost
openstack-tripleo-heat-templates	eq	11.3.2__1.20200914170156.el8ost
openstack-tripleo-heat-templates	eq	11.4.0__1.el8
openstack-tripleo-heat-templates	eq	11.3.2__1.20210720153316.el8ost