Skip to content
OpenAdvisories
Medium RHSA-2022:8796 1 CVE

Red Hat Security Advisory: Red Hat OpenStack 16.1.9 (openstack-tripleo-heat-templates) security update

Published Sep 16, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.1::el8 openstack-tripleo-heat-templates 0:11.3.2-1.20221013153262.el8ost

Vulnerabilities 1

  • Medium 4.3
    CVE-2021-4180

    Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates

    An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuratio…

    tripleo-heat-templates tripleo-heat-templates Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1851467
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1910115
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1917356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1936278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2032295
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2032518
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2034095
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2035793
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2036195
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2039412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2049452
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2061845
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062764
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2063031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064383
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2065736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2066852
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2069755
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2073607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2100907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2101949
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2103971
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2109931
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2129031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2129882
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2130078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2130140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2130849
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131961
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2136171
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2136393
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2141835
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8796.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-4180
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-4180
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-4180