~ / search / GHSA-pg64-r7rr-phv8

GHSA-pg64-r7rr-phv8

OpenStack Nova Server Resource Faults Leak External Exception Details

Source: GitHub Advisory Database (reviewed) High CVE-2019-14433

Packages

EcosystemPackageAffectedFixed in
PyPI nova < 17.0.12 17.0.12
PyPI nova >= 18.0.0, < 18.2.2 18.2.2
PyPI nova >= 19.0.0, < 19.0.2 19.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

References

External links from the advisory. They lead to third-party sites.