Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2fqr-cx7q-3ph8

Опубликовано: 02 авг. 2024
Источник: github
Github: Прошло ревью
CVSS4: 5.3
CVSS3: 5

Описание

openstack-heat may disclose sensitive information

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

Пакеты

Наименование

openstack-heat

pip
Затронутые версииВерсия исправления

<= 22.0.1

Отсутствует

EPSS

Процентиль: 66%
0.00507
Низкий

5.3 Medium

CVSS4

5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5
ubuntu
больше 1 года назад

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

CVSS3: 5
redhat
больше 1 года назад

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

CVSS3: 5
nvd
больше 1 года назад

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

CVSS3: 5
debian
больше 1 года назад

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensi ...

EPSS

Процентиль: 66%
0.00507
Низкий

5.3 Medium

CVSS4

5 Medium

CVSS3

Дефекты

CWE-200