CVE-2023-1625

Опубликовано: 24 сент. 2023

Источник: nvd

CVSS3: 7.4

CVSS3: 5

EPSS Низкий

Описание

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

Ссылки

https://access.redhat.com/security/cve/CVE-2023-1625
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181621
Issue Tracking
Third Party Advisory
https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb
Patch
https://launchpad.net/bugs/1999665
Exploit
Issue Tracking
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-1625
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181621
Issue Tracking
Third Party Advisory
https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb
Patch
https://launchpad.net/bugs/1999665
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openstack:heat:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack_platform:17.0:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00212

Низкий

7.4 High

CVSS3

5 Medium

CVSS3

Дефекты

CWE-202

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-1625

CVSS3: 7.4

ubuntu

больше 2 лет назад

CVE-2023-1625

CVSS3: 7.4

redhat

около 3 лет назад

CVE-2023-1625

CVSS3: 7.4

debian

больше 2 лет назад

An information leak was discovered in OpenStack heat. This issue could ...

GHSA-5836-grcc-8j89

CVSS3: 7.4

github

больше 2 лет назад

OpenStack Heat information leak vulnerability

EPSS

Процентиль: 44%

0.00212

Низкий

7.4 High

CVSS3

5 Medium

CVSS3

Дефекты

CWE-202

NVD-CWE-noinfo