Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-3801
HistoryMay 23, 2014 - 12:00 a.m.

CVE-2014-3801

2014-05-2300:00:00
ubuntu.com
ubuntu.com
10

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

EPSS

0.002

Percentile

60.2%

OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when
creating the stack for a template using a provider template, allows remote
authenticated users to obtain the provider template URL via the
resource-type-list.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchheat< 2014.1-0ubuntu1.1UNKNOWN

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

EPSS

0.002

Percentile

60.2%