An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the stack show command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
When trying to keep information confidential, an attacker can often infer some of the information by using statistics.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Heat | Openstack | - (including) | - (including) |
| Heat | Ubuntu | bionic | * |
| Heat | Ubuntu | focal | * |
| Heat | Ubuntu | jammy | * |
| Heat | Ubuntu | kinetic | * |
| Heat | Ubuntu | trusty | * |
| Heat | Ubuntu | xenial | * |