medium5.0
CVE-2024-7319
openstack-heat may disclose sensitive information
Impact
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | openstack-heat | <= 22.0.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Heat | All versions |
| Redhat | Openstack Platform | Versions 13.0, 16.1, 16.2, 17.0 |