Vulnerability in Openstack Heat
CVE-2023-1625
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidenti…
EPSS: 0.007 (49.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L.
Affected products
- Openstack Heat
- Rdo Openstack
- Red Hat Openstack Platform 13 (Queens)
- Red Hat Openstack Platform 16.1
- Red Hat Openstack Platform 16.2
- Red Hat Openstack Platform 17.0
- Redhat Openstack_platform — versions 13.0, 16.1, 16.2
- N/a Openstack-heat
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, Third Party Advisory, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Third Party Advisory, Issue Tracking)
- secalert@redhat.com (Patch)
- secalert@redhat.com (Exploit, Third Party Advisory, Issue Tracking)
Frequently asked questions
- What is CVE-2023-1625?
- CVE-2023-1625 is a high-severity vulnerability in Openstack Heat, classified under CWE-202. CVSS score: 7.4/10. Published 2023-09-24.
- How severe is CVE-2023-1625?
- High severity. CVSS v3 base score is 7.4 out of 10.