Advisory details:
pypa / nova/PYSEC-2019-191
| Advisory ID | pypa/nova/PYSEC-2019-191 |
| Aliases |
CVE-2019-14433
GHSA-pg64-r7rr-phv8 PYSEC-2019-191 |
| Summary | An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| There are no known severity scores. | ||
| Reference id | Reference type | URL |
|---|---|---|
| https://launchpad.net/bugs/1837877 | ||
| https://security.openstack.org/ossa/OSSA-2019-003.html | ||
| https://usn.ubuntu.com/4104-1/ | ||
| http://www.openwall.com/lists/oss-security/2019/08/06/6 | ||
| GHSA-pg64-r7rr-phv8 | https://github.com/advisories/GHSA-pg64-r7rr-phv8 | |
| RHSA-2019:2622 | https://access.redhat.com/errata/RHSA-2019:2622 | |
| RHSA-2019:2631 | https://access.redhat.com/errata/RHSA-2019:2631 | |
| RHSA-2019:2652 | https://access.redhat.com/errata/RHSA-2019:2652 |
No exploits are available.
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no known vectors.
There are no SSVC decisions available.