OpenStack Heat vulnerability

2023-08-1600:00:00

ubuntu.com

openstack

heat

ubuntu

orchestration service

vulnerability

hidden parameter

sensitive data

security

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

JSON

Releases

Ubuntu 22.04 LTS

Packages

heat - OpenStack Orchestration Service

Details

It was discovered that OpenStack Heat incorrectly handled certain hidden
parameter values. A remote authenticated user could possibly use this issue
to obtain sensitive data.

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchpython3-heat< 1:18.0.1-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchheat-api< 1:18.0.1-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchheat-api-cfn< 1:18.0.1-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchheat-common< 1:18.0.1-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchheat-engine< 1:18.0.1-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.04	noarch	python3-heat	< 1:18.0.1-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	heat-api	< 1:18.0.1-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	heat-api-cfn	< 1:18.0.1-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	heat-common	< 1:18.0.1-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	heat-engine	< 1:18.0.1-0ubuntu1.1	UNKNOWN