Lucene search

K
cvelistMitreCVELIST:CVE-2024-29156
HistoryMar 18, 2024 - 12:00 a.m.

CVE-2024-29156

2024-03-1800:00:00
mitre
www.cve.org
1
openstack
murano
vulnerability
yaql
sensitive data
leakage
service account

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service’s MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%