Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-2621 (GCVE-0-2017-2621)
Vulnerability from cvelistv5
Published
2018-07-27 18:00
Modified
2024-08-05 14:02
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Red Hat | openstack-heat |
Version: openstack-heat-8.0.0 Version: openstack-heat-6.1.0 Version: openstack-heat-7.0.2 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T14:02:06.948Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621"
},
{
"name": "RHSA-2017:1243",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"name": "RHSA-2017:1464",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"name": "96280",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/96280"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "openstack-heat",
"vendor": "Red Hat",
"versions": [
{
"status": "affected",
"version": "openstack-heat-8.0.0"
},
{
"status": "affected",
"version": "openstack-heat-6.1.0"
},
{
"status": "affected",
"version": "openstack-heat-7.0.2"
}
]
}
],
"datePublic": "2017-02-15T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "CWE-552",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-07-28T09:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621"
},
{
"name": "RHSA-2017:1243",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"name": "RHSA-2017:1464",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"name": "96280",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/96280"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2017-2621",
"datePublished": "2018-07-27T18:00:00",
"dateReserved": "2016-12-01T00:00:00",
"dateUpdated": "2024-08-05T14:02:06.948Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2017-2621\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2018-07-27T18:29:00.737\",\"lastModified\":\"2024-11-21T03:23:51.043\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.\"},{\"lang\":\"es\",\"value\":\"Se ha encontrado un fallo de control de acceso en OpenStack Orchestration (heat) en versiones anteriores a la 8.0.0, 6.1.0 y 7.0.2, en el que un directorio de registro de servicio se hac\u00eda legible para todos los usuarios de manera incorrecta. Un usuario malicioso del sistema podr\u00eda explotar esta vulnerabilidad para acceder a informaci\u00f3n confidencial.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"cvssMetricV30\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.5,\"impactScore\":4.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-552\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-532\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openstack:heat:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"8.0.0\",\"matchCriteriaId\":\"60809669-2541-42D6-A0AE-AE027BC82BCF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/96280\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1243\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1464\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/96280\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1243\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1464\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]}]}}"
}
}
rhsa-2017_1243
Vulnerability from csaf_redhat
Published
2017-05-17 12:18
Modified
2024-11-21 19:57
Summary
Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update
Notes
Topic
An update for openstack-heat is now available for Red Hat OpenStack Platform 10.0 (Newton).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.
The following packages have been upgraded to a later upstream version: openstack-heat (7.0.2). (BZ#1431258)
Security Fix(es):
* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)
Red Hat would like to thank Hans Feldt (Ericsson) for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openstack-heat is now available for Red Hat OpenStack Platform 10.0 (Newton).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.\n\nThe following packages have been upgraded to a later upstream version: openstack-heat (7.0.2). (BZ#1431258)\n\nSecurity Fix(es):\n\n* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)\n\nRed Hat would like to thank Hans Feldt (Ericsson) for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1243",
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "1424578",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424578"
},
{
"category": "external",
"summary": "1424886",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424886"
},
{
"category": "external",
"summary": "1428632",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428632"
},
{
"category": "external",
"summary": "1428877",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428877"
},
{
"category": "external",
"summary": "1431258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1431258"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1243.json"
}
],
"title": "Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-21T19:57:26+00:00",
"generator": {
"date": "2024-11-21T19:57:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:1243",
"initial_release_date": "2017-05-17T12:18:42+00:00",
"revision_history": [
{
"date": "2017-05-17T12:18:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-05-17T12:18:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T19:57:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 10.0",
"product": {
"name": "Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cfn@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-engine@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product_id": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-heat-tests@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-common@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cloudwatch@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-1:7.0.2-4.el7ost.src",
"product": {
"name": "openstack-heat-1:7.0.2-4.el7ost.src",
"product_id": "openstack-heat-1:7.0.2-4.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat@7.0.2-4.el7ost?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-1:7.0.2-4.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src"
},
"product_reference": "openstack-heat-1:7.0.2-4.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Hans Feldt"
],
"organization": "Ericsson"
}
],
"cve": "CVE-2017-2621",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1420990"
}
],
"notes": [
{
"category": "description",
"text": "An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: /var/log/heat/ is world readable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-2621"
},
{
"category": "external",
"summary": "RHBZ#1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-2621",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-2621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621"
}
],
"release_date": "2017-02-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-05-17T12:18:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-heat: /var/log/heat/ is world readable"
}
]
}
RHSA-2017:1243
Vulnerability from csaf_redhat
Published
2017-05-17 12:18
Modified
2025-11-21 18:00
Summary
Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update
Notes
Topic
An update for openstack-heat is now available for Red Hat OpenStack Platform 10.0 (Newton).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.
The following packages have been upgraded to a later upstream version: openstack-heat (7.0.2). (BZ#1431258)
Security Fix(es):
* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)
Red Hat would like to thank Hans Feldt (Ericsson) for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openstack-heat is now available for Red Hat OpenStack Platform 10.0 (Newton).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.\n\nThe following packages have been upgraded to a later upstream version: openstack-heat (7.0.2). (BZ#1431258)\n\nSecurity Fix(es):\n\n* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)\n\nRed Hat would like to thank Hans Feldt (Ericsson) for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1243",
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "1424578",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424578"
},
{
"category": "external",
"summary": "1424886",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424886"
},
{
"category": "external",
"summary": "1428632",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428632"
},
{
"category": "external",
"summary": "1428877",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428877"
},
{
"category": "external",
"summary": "1431258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1431258"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1243.json"
}
],
"title": "Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:00:33+00:00",
"generator": {
"date": "2025-11-21T18:00:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2017:1243",
"initial_release_date": "2017-05-17T12:18:42+00:00",
"revision_history": [
{
"date": "2017-05-17T12:18:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-05-17T12:18:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:00:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 10.0",
"product": {
"name": "Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cfn@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-engine@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product_id": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-heat-tests@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-common@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cloudwatch@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-1:7.0.2-4.el7ost.src",
"product": {
"name": "openstack-heat-1:7.0.2-4.el7ost.src",
"product_id": "openstack-heat-1:7.0.2-4.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat@7.0.2-4.el7ost?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-1:7.0.2-4.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src"
},
"product_reference": "openstack-heat-1:7.0.2-4.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Hans Feldt"
],
"organization": "Ericsson"
}
],
"cve": "CVE-2017-2621",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1420990"
}
],
"notes": [
{
"category": "description",
"text": "An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: /var/log/heat/ is world readable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-2621"
},
{
"category": "external",
"summary": "RHBZ#1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-2621",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-2621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621"
}
],
"release_date": "2017-02-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-05-17T12:18:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-heat: /var/log/heat/ is world readable"
}
]
}
rhsa-2017_1464
Vulnerability from csaf_redhat
Published
2017-06-14 15:28
Modified
2024-11-21 19:57
Summary
Red Hat Security Advisory: openstack-heat security and bug fix update
Notes
Topic
An update for openstack-heat is now available for Red Hat OpenStack Platform 9.0 (Mitaka).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.
Security Fix(es):
* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)
* An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services. (CVE-2016-9185)
Red Hat would like to thank Hans Feldt (Ericsson) for reporting CVE-2017-2621.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openstack-heat is now available for Red Hat OpenStack Platform 9.0 (Mitaka).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.\n\nSecurity Fix(es):\n\n* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)\n\n* An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services. (CVE-2016-9185)\n\nRed Hat would like to thank Hans Feldt (Ericsson) for reporting CVE-2017-2621.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1464",
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1391895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391895"
},
{
"category": "external",
"summary": "1418159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418159"
},
{
"category": "external",
"summary": "1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "1424586",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424586"
},
{
"category": "external",
"summary": "1424885",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424885"
},
{
"category": "external",
"summary": "1428879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428879"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1464.json"
}
],
"title": "Red Hat Security Advisory: openstack-heat security and bug fix update",
"tracking": {
"current_release_date": "2024-11-21T19:57:20+00:00",
"generator": {
"date": "2024-11-21T19:57:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:1464",
"initial_release_date": "2017-06-14T15:28:36+00:00",
"revision_history": [
{
"date": "2017-06-14T15:28:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-14T15:28:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T19:57:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 9.0",
"product": {
"name": "Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:9::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-engine@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product_id": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-heat-tests@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cloudwatch@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-common@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cfn@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-1:6.1.0-3.el7ost.src",
"product": {
"name": "openstack-heat-1:6.1.0-3.el7ost.src",
"product_id": "openstack-heat-1:6.1.0-3.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat@6.1.0-3.el7ost?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-1:6.1.0-3.el7ost.src as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src"
},
"product_reference": "openstack-heat-1:6.1.0-3.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9185",
"discovery_date": "2016-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1391895"
}
],
"notes": [
{
"category": "description",
"text": "An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: Template source URL allows network port scan",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9185"
},
{
"category": "external",
"summary": "RHBZ#1391895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391895"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9185"
}
],
"release_date": "2016-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-14T15:28:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openstack-heat: Template source URL allows network port scan"
},
{
"acknowledgments": [
{
"names": [
"Hans Feldt"
],
"organization": "Ericsson"
}
],
"cve": "CVE-2017-2621",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1420990"
}
],
"notes": [
{
"category": "description",
"text": "An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: /var/log/heat/ is world readable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-2621"
},
{
"category": "external",
"summary": "RHBZ#1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-2621",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-2621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621"
}
],
"release_date": "2017-02-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-14T15:28:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-heat: /var/log/heat/ is world readable"
}
]
}
RHSA-2017:1464
Vulnerability from csaf_redhat
Published
2017-06-14 15:28
Modified
2025-11-21 18:00
Summary
Red Hat Security Advisory: openstack-heat security and bug fix update
Notes
Topic
An update for openstack-heat is now available for Red Hat OpenStack Platform 9.0 (Mitaka).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.
Security Fix(es):
* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)
* An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services. (CVE-2016-9185)
Red Hat would like to thank Hans Feldt (Ericsson) for reporting CVE-2017-2621.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openstack-heat is now available for Red Hat OpenStack Platform 9.0 (Mitaka).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.\n\nSecurity Fix(es):\n\n* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)\n\n* An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services. (CVE-2016-9185)\n\nRed Hat would like to thank Hans Feldt (Ericsson) for reporting CVE-2017-2621.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1464",
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1391895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391895"
},
{
"category": "external",
"summary": "1418159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418159"
},
{
"category": "external",
"summary": "1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "1424586",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424586"
},
{
"category": "external",
"summary": "1424885",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424885"
},
{
"category": "external",
"summary": "1428879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428879"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1464.json"
}
],
"title": "Red Hat Security Advisory: openstack-heat security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T18:00:54+00:00",
"generator": {
"date": "2025-11-21T18:00:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2017:1464",
"initial_release_date": "2017-06-14T15:28:36+00:00",
"revision_history": [
{
"date": "2017-06-14T15:28:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-14T15:28:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:00:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 9.0",
"product": {
"name": "Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:9::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-engine@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product_id": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-heat-tests@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cloudwatch@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-common@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cfn@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-1:6.1.0-3.el7ost.src",
"product": {
"name": "openstack-heat-1:6.1.0-3.el7ost.src",
"product_id": "openstack-heat-1:6.1.0-3.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat@6.1.0-3.el7ost?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-1:6.1.0-3.el7ost.src as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src"
},
"product_reference": "openstack-heat-1:6.1.0-3.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9185",
"discovery_date": "2016-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1391895"
}
],
"notes": [
{
"category": "description",
"text": "An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: Template source URL allows network port scan",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9185"
},
{
"category": "external",
"summary": "RHBZ#1391895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391895"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9185"
}
],
"release_date": "2016-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-14T15:28:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openstack-heat: Template source URL allows network port scan"
},
{
"acknowledgments": [
{
"names": [
"Hans Feldt"
],
"organization": "Ericsson"
}
],
"cve": "CVE-2017-2621",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1420990"
}
],
"notes": [
{
"category": "description",
"text": "An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: /var/log/heat/ is world readable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-2621"
},
{
"category": "external",
"summary": "RHBZ#1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-2621",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-2621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621"
}
],
"release_date": "2017-02-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-14T15:28:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-heat: /var/log/heat/ is world readable"
}
]
}
rhsa-2017:1464
Vulnerability from csaf_redhat
Published
2017-06-14 15:28
Modified
2025-11-21 18:00
Summary
Red Hat Security Advisory: openstack-heat security and bug fix update
Notes
Topic
An update for openstack-heat is now available for Red Hat OpenStack Platform 9.0 (Mitaka).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.
Security Fix(es):
* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)
* An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services. (CVE-2016-9185)
Red Hat would like to thank Hans Feldt (Ericsson) for reporting CVE-2017-2621.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openstack-heat is now available for Red Hat OpenStack Platform 9.0 (Mitaka).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.\n\nSecurity Fix(es):\n\n* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)\n\n* An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services. (CVE-2016-9185)\n\nRed Hat would like to thank Hans Feldt (Ericsson) for reporting CVE-2017-2621.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1464",
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1391895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391895"
},
{
"category": "external",
"summary": "1418159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418159"
},
{
"category": "external",
"summary": "1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "1424586",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424586"
},
{
"category": "external",
"summary": "1424885",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424885"
},
{
"category": "external",
"summary": "1428879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428879"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1464.json"
}
],
"title": "Red Hat Security Advisory: openstack-heat security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T18:00:54+00:00",
"generator": {
"date": "2025-11-21T18:00:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2017:1464",
"initial_release_date": "2017-06-14T15:28:36+00:00",
"revision_history": [
{
"date": "2017-06-14T15:28:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-14T15:28:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:00:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 9.0",
"product": {
"name": "Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:9::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-engine@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product_id": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-heat-tests@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cloudwatch@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-common@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product_id": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cfn@6.1.0-3.el7ost?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-1:6.1.0-3.el7ost.src",
"product": {
"name": "openstack-heat-1:6.1.0-3.el7ost.src",
"product_id": "openstack-heat-1:6.1.0-3.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat@6.1.0-3.el7ost?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-1:6.1.0-3.el7ost.src as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src"
},
"product_reference": "openstack-heat-1:6.1.0-3.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-common-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-tests-1:6.1.0-3.el7ost.noarch as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
},
"product_reference": "python-heat-tests-1:6.1.0-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9185",
"discovery_date": "2016-11-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1391895"
}
],
"notes": [
{
"category": "description",
"text": "An information-leak vulnerability was found in the OpenStack Orchestration (heat) service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: Template source URL allows network port scan",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9185"
},
{
"category": "external",
"summary": "RHBZ#1391895",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1391895"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9185"
}
],
"release_date": "2016-11-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-14T15:28:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openstack-heat: Template source URL allows network port scan"
},
{
"acknowledgments": [
{
"names": [
"Hans Feldt"
],
"organization": "Ericsson"
}
],
"cve": "CVE-2017-2621",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1420990"
}
],
"notes": [
{
"category": "description",
"text": "An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: /var/log/heat/ is world readable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-2621"
},
{
"category": "external",
"summary": "RHBZ#1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-2621",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-2621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621"
}
],
"release_date": "2017-02-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-14T15:28:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-9.0:openstack-heat-1:6.1.0-3.el7ost.src",
"7Server-RH7-RHOS-9.0:openstack-heat-api-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cfn-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-api-cloudwatch-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-common-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:openstack-heat-engine-1:6.1.0-3.el7ost.noarch",
"7Server-RH7-RHOS-9.0:python-heat-tests-1:6.1.0-3.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-heat: /var/log/heat/ is world readable"
}
]
}
rhsa-2017:1243
Vulnerability from csaf_redhat
Published
2017-05-17 12:18
Modified
2025-11-21 18:00
Summary
Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update
Notes
Topic
An update for openstack-heat is now available for Red Hat OpenStack Platform 10.0 (Newton).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.
The following packages have been upgraded to a later upstream version: openstack-heat (7.0.2). (BZ#1431258)
Security Fix(es):
* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)
Red Hat would like to thank Hans Feldt (Ericsson) for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openstack-heat is now available for Red Hat OpenStack Platform 10.0 (Newton).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenStack Orchestration (heat) is a template-driven engine used to specify and deploy configurations for Compute, Storage, and OpenStack Networking. The service can be used to automate post-deployment actions, which in turn allows automated provisioning of infrastructure, services, and applications. Additionally, Orchestration can be integrated with Telemetry alarms to implement auto-scaling for certain infrastructure resources.\n\nThe following packages have been upgraded to a later upstream version: openstack-heat (7.0.2). (BZ#1431258)\n\nSecurity Fix(es):\n\n* An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information. (CVE-2017-2621)\n\nRed Hat would like to thank Hans Feldt (Ericsson) for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1243",
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "1424578",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424578"
},
{
"category": "external",
"summary": "1424886",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1424886"
},
{
"category": "external",
"summary": "1428632",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428632"
},
{
"category": "external",
"summary": "1428877",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1428877"
},
{
"category": "external",
"summary": "1431258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1431258"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1243.json"
}
],
"title": "Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:00:33+00:00",
"generator": {
"date": "2025-11-21T18:00:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2017:1243",
"initial_release_date": "2017-05-17T12:18:42+00:00",
"revision_history": [
{
"date": "2017-05-17T12:18:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-05-17T12:18:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:00:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 10.0",
"product": {
"name": "Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cfn@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-engine@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product_id": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-heat-tests@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-common@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product": {
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product_id": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat-api-cloudwatch@7.0.2-4.el7ost?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-heat-1:7.0.2-4.el7ost.src",
"product": {
"name": "openstack-heat-1:7.0.2-4.el7ost.src",
"product_id": "openstack-heat-1:7.0.2-4.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-heat@7.0.2-4.el7ost?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-1:7.0.2-4.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src"
},
"product_reference": "openstack-heat-1:7.0.2-4.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-common-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-heat-tests-1:7.0.2-4.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
},
"product_reference": "python-heat-tests-1:7.0.2-4.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Hans Feldt"
],
"organization": "Ericsson"
}
],
"cve": "CVE-2017-2621",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1420990"
}
],
"notes": [
{
"category": "description",
"text": "An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-heat: /var/log/heat/ is world readable",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-2621"
},
{
"category": "external",
"summary": "RHBZ#1420990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-2621",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-2621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621"
}
],
"release_date": "2017-02-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-05-17T12:18:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-heat-1:7.0.2-4.el7ost.src",
"7Server-RH7-RHOS-10.0:openstack-heat-api-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cfn-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-api-cloudwatch-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-common-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-heat-engine-1:7.0.2-4.el7ost.noarch",
"7Server-RH7-RHOS-10.0:python-heat-tests-1:7.0.2-4.el7ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-heat: /var/log/heat/ is world readable"
}
]
}
cnvd-2017-02251
Vulnerability from cnvd
Title
OpenStack Heat信息泄露漏洞（CNVD-2017-02251）
Description
OpenStack是一个云平台管理项目。Heat是其中的一套用于帮助用户配置以OpenStack为基础的云体系的业务流程平台。
OpenStack Heat存在安全漏洞，允许本地攻击者可利用漏洞获取敏感信息。
Severity
低
VLAI Severity ?
Patch Name
OpenStack Heat信息泄露漏洞（CNVD-2017-02251）的补丁
Patch Description
OpenStack是一个云平台管理项目。Heat是其中的一套用于帮助用户配置以OpenStack为基础的云体系的业务流程平台。
OpenStack Heat存在安全漏洞，允许本地攻击者可利用漏洞获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序，请及时关注更新： https://www.openstack.org/
Reference
http://www.securityfocus.com/bid/96280
Impacted products
| Name | FrontRange Solutions USA Inc. HEAT 0 |
|---|
{
"bids": {
"bid": {
"bidNumber": "96280"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2017-2621"
}
},
"description": "OpenStack\u662f\u4e00\u4e2a\u4e91\u5e73\u53f0\u7ba1\u7406\u9879\u76ee\u3002Heat\u662f\u5176\u4e2d\u7684\u4e00\u5957\u7528\u4e8e\u5e2e\u52a9\u7528\u6237\u914d\u7f6e\u4ee5OpenStack\u4e3a\u57fa\u7840\u7684\u4e91\u4f53\u7cfb\u7684\u4e1a\u52a1\u6d41\u7a0b\u5e73\u53f0\u3002\r\n\r\nOpenStack Heat\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
"discovererName": "Hans Feldt (Ericsson)",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.openstack.org/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2017-02251",
"openTime": "2017-03-01",
"patchDescription": "OpenStack\u662f\u4e00\u4e2a\u4e91\u5e73\u53f0\u7ba1\u7406\u9879\u76ee\u3002Heat\u662f\u5176\u4e2d\u7684\u4e00\u5957\u7528\u4e8e\u5e2e\u52a9\u7528\u6237\u914d\u7f6e\u4ee5OpenStack\u4e3a\u57fa\u7840\u7684\u4e91\u4f53\u7cfb\u7684\u4e1a\u52a1\u6d41\u7a0b\u5e73\u53f0\u3002\r\n\r\nOpenStack Heat\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u5141\u8bb8\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "OpenStack Heat\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2017-02251\uff09\u7684\u8865\u4e01",
"products": {
"product": "FrontRange Solutions USA Inc. HEAT 0"
},
"referenceLink": "http://www.securityfocus.com/bid/96280",
"serverity": "\u4f4e",
"submitTime": "2017-02-22",
"title": "OpenStack Heat\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2017-02251\uff09"
}
ghsa-93f2-xp2g-gqxp
Vulnerability from github
Published
2022-05-03 00:01
Modified
2022-05-03 00:01
Severity ?
VLAI Severity ?
Details
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
{
"affected": [],
"aliases": [
"CVE-2017-2621"
],
"database_specific": {
"cwe_ids": [
"CWE-532",
"CWE-552"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-07-27T18:29:00Z",
"severity": "MODERATE"
},
"details": "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"id": "GHSA-93f2-xp2g-gqxp",
"modified": "2022-05-03T00:01:26Z",
"published": "2022-05-03T00:01:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2621"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2017-2621"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420990"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/96280"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
fkie_cve-2017-2621
Vulnerability from fkie_nvd
Published
2018-07-27 18:29
Modified
2024-11-21 03:23
Severity ?
Summary
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | http://www.securityfocus.com/bid/96280 | Broken Link, Third Party Advisory, VDB Entry | |
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2017:1243 | Vendor Advisory | |
| secalert@redhat.com | https://access.redhat.com/errata/RHSA-2017:1464 | Vendor Advisory | |
| secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621 | Issue Tracking, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/96280 | Broken Link, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:1243 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:1464 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621 | Issue Tracking, Vendor Advisory |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openstack:heat:*:*:*:*:*:*:*:*",
"matchCriteriaId": "60809669-2541-42D6-A0AE-AE027BC82BCF",
"versionEndExcluding": "8.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
"matchCriteriaId": "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
"matchCriteriaId": "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information."
},
{
"lang": "es",
"value": "Se ha encontrado un fallo de control de acceso en OpenStack Orchestration (heat) en versiones anteriores a la 8.0.0, 6.1.0 y 7.0.2, en el que un directorio de registro de servicio se hac\u00eda legible para todos los usuarios de manera incorrecta. Un usuario malicioso del sistema podr\u00eda explotar esta vulnerabilidad para acceder a informaci\u00f3n confidencial."
}
],
"id": "CVE-2017-2621",
"lastModified": "2024-11-21T03:23:51.043",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"exploitabilityScore": 1.5,
"impactScore": 4.0,
"source": "secalert@redhat.com",
"type": "Secondary"
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2018-07-27T18:29:00.737",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/96280"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"source": "secalert@redhat.com",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/96280"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-552"
}
],
"source": "secalert@redhat.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-532"
}
],
"source": "nvd@nist.gov",
"type": "Secondary"
}
]
}
gsd-2017-2621
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2017-2621",
"description": "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"id": "GSD-2017-2621",
"references": [
"https://www.suse.com/security/cve/CVE-2017-2621.html",
"https://access.redhat.com/errata/RHSA-2017:1464",
"https://access.redhat.com/errata/RHSA-2017:1243"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2017-2621"
],
"details": "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.",
"id": "GSD-2017-2621",
"modified": "2023-12-13T01:21:05.405137Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2017-2621",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "openstack-heat",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "openstack-heat-8.0.0"
},
{
"version_affected": "=",
"version_value": "openstack-heat-6.1.0"
},
{
"version_affected": "=",
"version_value": "openstack-heat-7.0.2"
}
]
}
}
]
},
"vendor_name": "Red Hat"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information."
}
]
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-552",
"lang": "eng",
"value": "CWE-552"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.securityfocus.com/bid/96280",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/96280"
},
{
"name": "https://access.redhat.com/errata/RHSA-2017:1243",
"refsource": "MISC",
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"name": "https://access.redhat.com/errata/RHSA-2017:1464",
"refsource": "MISC",
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openstack:heat:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "8.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2017-2621"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-552"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621"
},
{
"name": "RHSA-2017:1464",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1464"
},
{
"name": "RHSA-2017:1243",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1243"
},
{
"name": "96280",
"refsource": "BID",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/96280"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-02-12T23:29Z",
"publishedDate": "2018-07-27T18:29Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…