Описание
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenStack Platform 13 (Queens) | openstack-tripleo-heat-templates | Out of support scope | ||
| Red Hat OpenStack Platform 13 (Queens) | openstack-tripleo-heat-templates-compat | Out of support scope | ||
| Red Hat OpenStack Platform 16.1 | openstack-tripleo-heat-templates | Fixed | RHSA-2022:8796 | 07.12.2022 |
| Red Hat OpenStack Platform 16.2 | openstack-tripleo-heat-templates | Fixed | RHSA-2022:0995 | 23.03.2022 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.3 Medium
CVSS3
Связанные уязвимости
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
An information exposure flaw in openstack-tripleo-heat-templates allow ...
Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
EPSS
4.3 Medium
CVSS3