Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:48602
HistoryAug 27, 2024 - 9:44 a.m.

Sensitive Information Disclosure

2024-08-2709:44:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
openstack-heat
vulnerability
sensitive information disclosure
abandon command
hidden feature

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

6.4

Confidence

Low

openstack-heat is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the stack abandon command with the hidden feature set to True by which an attacker can disclose sensitive information.

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

6.4

Confidence

Low