OpenStack Orchestration API Vulnerability in Heat by OpenStack
CVE-2014-3801

Currently unrated

Key Information:

Vendor

Openstack
Status
Heat
Vendor
CVE Published:
23 May 2014

What is CVE-2014-3801?

The OpenStack Orchestration API (Heat) is vulnerable due to improper access control that allows remote authenticated users to access sensitive information. By exploiting this flaw, attackers can obtain the provider template URL through the resource-type-list while creating a stack. This could lead to unauthorized exposure of details that could be leveraged for further attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/67505
vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-2249-1
vendor-advisoryx_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2014/05/20/1
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.