CVE-2021-4180CWE-200

CVE-2021-4180: falha em openstack-tripleo-heat-templates

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar openstack-tripleo-heat-templates+ Monitorar tripleo-heat-templates

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.8%
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
Produtos afetados
n/a · openstack-tripleo-heat-templates