CVE-2023-1625: OpenStack Heat information leak vulnerability

September 24, 2023 (updated September 27, 2023)

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the ‘stack show’ command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

References

access.redhat.com/security/cve/CVE-2023-1625
bugzilla.redhat.com/show_bug.cgi?id=2181621
github.com/advisories/GHSA-5836-grcc-8j89
github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb
launchpad.net/bugs/1999665
nvd.nist.gov/vuln/detail/CVE-2023-1625

Code Behaviors & Features

Detect and mitigate CVE-2023-1625 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →