CVE-2023-1625CWE-202

Information leak in api

High · published September 24, 2023

CVSS v3.1
7.4
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00715 · 53.2th percentile
Weakness
CWE-202 · Exposure of Sensitive Information Through Data Queries
Published
2023-09-24T00:08Z
EPSS history
Timeline
  • 24 SEP 00:08Z
    Information leak in api
    cvelistv5