Red Hat Security Advisory

RHSA-2017:1243

openstack-heat security, bug fix, and enhancement update

Released 2017-05-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 openstack-heat-1:7.0.2-4.el7ost, openstack-heat-api-1:7.0.2-4.el7ost, openstack-heat-api-cfn-1:7.0.2-4.el7ost +4

Fixes 1 record

TI-2017-01872 CVE-2017-2621 · GHSA-93f2-xp2g-gqxp

Sensitive information in log files in Red Hat openstack-heat

LOW 25

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00413 Published 2018-07-27 Fixed CWE-552