CVE-2023-1625

Katalog CVE

CVSS 5.0 · Medium EPSS 0,72%

Kerentanan Exposure of Sensitive Information Through Data Queries pada openstack heat, redhat openstack platform. Skor CVSS 3.1 5.0 (Medium) menurut NVD.

Deskripsi (NVD)

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

Rincian

Terbit di NVD

24 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.0 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-202: Exposure of Sensitive Information Through Data Queries

EPSS (30 hari)

0,72% peluang dieksploitasi; lebih tinggi dari 52,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb patch
• https://access.redhat.com/security/cve/CVE-2023-1625 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2181621 issue tracking · advisory pihak ketiga
• https://launchpad.net/bugs/1999665 exploit · issue tracking · advisory pihak ketiga