Lucene search
GoogleOSV:GHSA-2FQR-CX7Q-3PH8HistoryAug 02, 2024 - 9:31 p.m.
openstack-heat may disclose sensitive information
2024-08-0221:31:34
Google
osv.dev
4
openstack
sensitive information
disclosure
cve-2023-1625
fix
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
32.6%
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Related
cve
cve
CVE-2024-7319
2024-08-02 21:16:31
CVE-2023-1625
2023-09-24 01:15:43
debiancve
debiancve
CVE-2024-7319
2024-08-02 21:16:31
CVE-2023-1625
2023-09-24 01:15:43
vulnrichment
vulnrichment
CVE-2024-7319 Openstack-heat: incomplete fix for cve-2023-1625
2024-08-02 20:36:24
cvelist
cvelist
CVE-2024-7319 Openstack-heat: incomplete fix for cve-2023-1625
2024-08-02 20:36:24
CVE-2023-1625 Information leak in api
2023-09-24 00:08:12
github
github
openstack-heat may disclose sensitive information
2024-08-02 21:31:34
OpenStack Heat information leak vulnerability
2023-09-24 03:30:20
ubuntucve
ubuntucve
CVE-2024-7319
2024-08-02 00:00:00
CVE-2023-1625
2023-03-27 00:00:00
nvd
nvd
CVE-2024-7319
2024-08-02 21:16:31
CVE-2023-1625
2023-09-24 01:15:43
redhatcve
redhatcve
CVE-2024-7319
2024-07-31 09:20:50
CVE-2023-1625
2023-03-24 19:43:06
veracode
veracode
Sensitive Information Disclosure
2024-08-27 09:44:41
Information Disclosure
2023-04-28 01:53:27
nessus
nessus
Ubuntu 22.04 LTS : OpenStack Heat vulnerability (USN-6293-1)
2023-08-16 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : OpenStack Heat vulnerability (USN-6066-1)
2023-05-13 00:00:00
prion
prion
Stack overflow
2023-09-24 01:15:00
osv
osv
CVE-2023-1625
2023-09-24 01:15:43
heat vulnerability
2023-05-10 11:18:02
heat vulnerability
2023-08-16 12:17:32
openvas
openvas
Ubuntu: Security Advisory (USN-6066-1)
2023-05-11 00:00:00
Ubuntu: Security Advisory (USN-6293-1)
2023-08-17 00:00:00
ubuntu
ubuntu
OpenStack Heat vulnerability
2023-05-10 00:00:00
OpenStack Heat vulnerability
2023-08-16 00:00:00
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
32.6%
Related for OSV:GHSA-2FQR-CX7Q-3PH8