Information disclosure in openstack-tripleo-heat-templates
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Partial Red Hat: 2 fixed, 1 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.
Summary
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | openstack-tripleo-heat-templates | openstack-tripleo-heat-templates versions prior to 11.6.1 | — | No fix listed | CNA |
| — | tripleo-heat-templates (PyPI) | before 11.6.1 | 11.6.1 | Patch available | GHSA-hm3x-jwwf-jpr9 |
- openstack-tripleo-heat-templates Vendor— Affected openstack-tripleo-heat-templates versions prior to 11.6.1 Fixed in — No fix listed CNA
- tripleo-heat-templates (PyPI) Vendor— Affected before 11.6.1 Fixed in 11.6.1 Patch available GHSA-hm3x-jwwf-jpr9
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openstack:tripleo_heat_templates:*:*:*:*:*:*:*:* | before 11.6.1 | Vulnerable | OpenStack |
| cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* | 13 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:* | 16.1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:* | 16.2 | Vulnerable | Red Hat |
- cpe:2.3:a:openstack:tripleo_heat_templates:*:*:*:*:*:*:*:* Versions before 11.6.1 Vulnerable ·OpenStack
- cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* Versions 13 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:* Versions 16.1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:* Versions 16.2 Vulnerable ·Red Hat
Remediation
- Fix · GHSA-hm3x-jwwf-jpr9 tripleo-heat-templates (PyPI) Fixed in 11.6.1 Advisory →
Red Hat 2 advisories
- RHSA-2022:8796 Released 2022-12-07 · Red Hat rating ModerateRed Hat OpenStack 16.1.9 (openstack-tripleo-heat-templates) security update
- Red Hat OpenStack Platform 16.1 openstack-tripleo-heat-templates-11.3.2-1.20221013153262.el8ost
- RHSA-2022:0995 Released 2022-03-23 · Red Hat rating ModerateRed Hat OpenStack Platform 16.2 (openstack-tripleo-heat-templates) security update
- Red Hat OpenStack Platform 16.2 openstack-tripleo-heat-templates-11.6.1-2.20220116004912.el8ost
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenStack Platform 13 (Queens) | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 16.1 | Fixed | RHSA-2022:8796 |
| Red Hat OpenStack Platform 16.2 | Fixed | RHSA-2022:0995 |
Timeline
- 2026-10-02 Threatist record created from CVE-2021-4180
- 2026-10-03 Alias added: GHSA-hm3x-jwwf-jpr9
References
Other 4
Sources
- CVE-2021-4180 · CVE Program
- CVE-2021-4180 · NVD
- FIRST EPSS
- GHSA-hm3x-jwwf-jpr9 · GitHub Advisory Database · CC BY 4.0
- CVE-2021-4180 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences