What is GHSA-5836-grcc-8j89?

GHSA-5836-grcc-8j89 is a security advisory published by GitHub Security Advisories with High severity. OpenStack Heat information leak vulnerability

Which CVE IDs does GHSA-5836-grcc-8j89 cover?

GHSA-5836-grcc-8j89 covers the following CVE IDs: CVE-2023-1625. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5836-grcc-8j89?

GHSA-5836-grcc-8j89 has a CVSS v3 base score of 7.4, published by GitHub Security Advisories.

Which products are affected by GHSA-5836-grcc-8j89?

GHSA-5836-grcc-8j89 affects 1 product, including: pip/openstack-heat:\u003c 20.0.0.

GHSA-5836-grcc-8j89HighCVSS 7.4

OpenStack Heat information leak vulnerability

Vendor

GitHub Security Advisories

Published

September 24, 2023

Last Modified

November 9, 2023

🔗 CVE IDs covered (1)

CVE-2023-1625 →

📋 Description

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

🎯 Affected products1

pip/openstack-heat:< 20.0.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2023-1625
https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb
https://access.redhat.com/security/cve/CVE-2023-1625
https://bugzilla.redhat.com/show_bug.cgi?id=2181621
https://launchpad.net/bugs/1999665
https://github.com/advisories/GHSA-5836-grcc-8j89