Red Hat Security Advisory

RHSA-2017:1456

openstack-heat security and bug fix update

Released 2017-06-14 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 8.0 (Liberty) openstack-heat-1:5.0.3-2.el7ost, openstack-heat-api-1:5.0.3-2.el7ost, openstack-heat-api-cfn-1:5.0.3-2.el7ost +3

Fixes 1 record

TI-2016-07514 CVE-2016-9185 · GHSA-249h-g975-9xj2

In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user…

LOW 23

In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01537 Published 2016-11-04 Partial fix CWE-200