Summary
It was discovered that OpenStack Heat incorrectly handled certain hidden
parameter values. A remote authenticated user could possibly use this issue
to obtain sensitive data.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | heat | 1:10.0.2-0ubuntu1.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | heat | 1:14.2.0-0ubuntu1.1 |
Vulnerabilities 1
-
High 7.4
Information leak in api
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, an…
References
-
report
https://ubuntu.com/security/CVE-2023-1625