CVE-2024-7319
published 2024-08-02CVE-2024-7319: An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command…
PriorityP424medium5CVSS 3.1
AVNACLPRLUINSCCLINAN
EPSS
0.39%
31.1th percentile
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | heat | — | — |
| redhat | openstack_platform | — | — |
| redhat | openstack_platform | — | — |
| redhat | openstack_platform | — | — |
| redhat | openstack_platform | — | — |
CVSS provenance
nvdv3.15.0MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
ghsa5.0MEDIUM
osv5.0MEDIUM
vendor_debian7.4LOW
vendor_redhat7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
openstack-heat may disclose sensitive information
ghsa·2024-08-02·CVSS 5.0
CVE-2024-7319 [MEDIUM] CWE-200 openstack-heat may disclose sensitive information
openstack-heat may disclose sensitive information
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
OSV
CVE-2024-7319: An incomplete fix for CVE-2023-1625 was found in openstack-heat
osv·2024-08-02·CVSS 5.0
CVE-2024-7319 [MEDIUM] CVE-2024-7319: An incomplete fix for CVE-2023-1625 was found in openstack-heat
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
OSV
openstack-heat may disclose sensitive information
osv·2024-08-02·CVSS 5.0
CVE-2024-7319 [MEDIUM] openstack-heat may disclose sensitive information
openstack-heat may disclose sensitive information
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Red Hat
openstack-heat: Incomplete fix for CVE-2023-1625
vendor_redhat·2024-07-31·CVSS 7.4
CVE-2024-7319 [HIGH] CWE-200 openstack-heat: Incomplete fix for CVE-2023-1625
openstack-heat: Incomplete fix for CVE-2023-1625
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Statement: While this flaw leaks a password, which could reduce confidentiality, integrity, and availability, the impact to this triad is rated Low. This is because OpenStack can not be more broadly compromised for two reasons:
a) The host has separate authorization authority from the guest
Debian
CVE-2024-7319: heat - An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive infor...
vendor_debian·2024·CVSS 7.4
CVE-2024-7319 [HIGH] CVE-2024-7319: heat - An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive infor...
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Scope: local
bookworm: open
bullseye: resolved
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-02
Published