Published: 04/11/2016 Updated: 05/01/2018

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openstack heat 7.0.0
openstack heat 6.0.0
openstack heat 6.1.0
openstack heat 5.0.3

Debian Bug report logs - #843232 heat: CVE-2016-9185: template source URL allows network port scan Package: src:heat; Maintainer for src:heat is Debian OpenStack <team+openstack@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 5 Nov 2016 10:57:01 UTC Severity: grave Tags: fixed-u ...

Synopsis Low: openstack-heat security and bug fix update Type/Severity Security Advisory: Low Topic An update for openstack-heat is now available for Red Hat OpenStack Platform 80 (Liberty)Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring Sys ...

Synopsis Low: openstack-heat security and bug fix update Type/Severity Security Advisory: Low Topic An update for openstack-heat is now available for Red Hat Enterprise Linux OpenStack Platform 70 (Kilo) for RHEL 7Red Hat Product Security has rated this update as having a security impact of Low A Common ...

Synopsis Moderate: openstack-heat security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for openstack-heat is now available for Red Hat OpenStack Platform 90 (Mitaka)Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabili ...

An information-leak vulnerability was found in the OpenStack Orchestration (heat) service Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services ...

CWE-200 https://bugs.launchpad.net/ossa/+bug/1606500 http://www.securityfocus.com/bid/94205 https://access.redhat.com/errata/RHSA-2017:1464 https://access.redhat.com/errata/RHSA-2017:1456 https://access.redhat.com/errata/RHSA-2017:1450 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=843232 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2017:1456 https://access.redhat.com/security/cve/cve-2016-9185

CVE-2016-9185

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect