Lucene search

K
cve[email protected]CVE-2024-29156
HistoryMar 18, 2024 - 7:15 a.m.

CVE-2024-29156

2024-03-1807:15:05
web.nvd.nist.gov
58
openstack
murano
yaql
vulnerability
sensitive information
data leakage
cve-2024-29156

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service’s MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%