Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2024-7319

Openstack-heat: incomplete fix for cve-2023-1625

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openstack-heat

Default version status: unaffected

  • 0 to ≤ 22.0.1affected

Red Hat Red Hat OpenStack Platform 13 (Queens)

Default version status: unknown

Red Hat Red Hat OpenStack Platform 16.1

Default version status: affected

Red Hat Red Hat OpenStack Platform 16.2

Default version status: affected

Red Hat Red Hat OpenStack Platform 17.0

Default version status: affected

References