CVE-2023-1625 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-1625 Interim 1 5 2023-09-25T23:22:52Z current 2023-03-27T23:14:52Z 2023-09-25T23:22:52Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-1625 An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2023-June/029724.html E-Mail link for SUSE-SU-2023:2378-1 https://lists.suse.com/pipermail/sle-updates/2023-June/029723.html E-Mail link for SUSE-SU-2023:2379-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openstack-heat-11.0.4~dev4-3.24.4 openstack-heat-9.0.8~dev22-3.30.3 openstack-heat-api-11.0.4~dev4-3.24.4 openstack-heat-api-9.0.8~dev22-3.30.3 openstack-heat-api-cfn-11.0.4~dev4-3.24.4 openstack-heat-api-cfn-9.0.8~dev22-3.30.3 openstack-heat-api-cloudwatch-9.0.8~dev22-3.30.3 openstack-heat-doc openstack-heat-doc-9.0.8~dev22-3.30.3 openstack-heat-engine-11.0.4~dev4-3.24.4 openstack-heat-engine-9.0.8~dev22-3.30.3 openstack-heat-plugin-heat_docker-11.0.4~dev4-3.24.4 openstack-heat-plugin-heat_docker-9.0.8~dev22-3.30.3 openstack-heat-test-9.0.8~dev22-3.30.3 openstack-swift-2.19.3~dev3-3.6.3 openstack-swift-account-2.19.3~dev3-3.6.3 openstack-swift-container-2.19.3~dev3-3.6.3 openstack-swift-object-2.19.3~dev3-3.6.3 openstack-swift-proxy-2.19.3~dev3-3.6.3 python-Werkzeug-0.12.2-3.6.2 python-Werkzeug-0.14.1-3.6.2 python-heat-11.0.4~dev4-3.24.4 python-heat-9.0.8~dev22-3.30.3 python-swift-2.19.3~dev3-3.6.3 venv-openstack-designate-x86_64-5.0.3~dev7-12.45.1 venv-openstack-designate-x86_64-7.0.2~dev2-3.41.2 venv-openstack-heat-x86_64-11.0.4~dev4-3.43.2 venv-openstack-heat-x86_64-9.0.8~dev22-12.51.1 venv-openstack-keystone-x86_64-14.2.1~dev9-3.42.2 venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.46.1 venv-openstack-magnum-x86_64-7.2.1~dev1-4.41.3 venv-openstack-octavia-x86_64-1.0.6~dev3-12.47.1 venv-openstack-octavia-x86_64-3.2.3~dev7-4.41.2 venv-openstack-sahara-x86_64-7.0.5~dev4-11.46.1 venv-openstack-sahara-x86_64-9.0.2~dev15-3.41.2 venv-openstack-swift-x86_64-2.19.3~dev3-2.36.3 openstack-heat-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 openstack-heat-api-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 openstack-heat-api-cfn-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 openstack-heat-api-cloudwatch-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 openstack-heat-doc-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 openstack-heat-engine-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 openstack-heat-plugin-heat_docker-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 openstack-heat-test-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 python-Werkzeug-0.12.2-3.6.2 as a component of HPE Helion OpenStack 8 python-heat-9.0.8~dev22-3.30.3 as a component of HPE Helion OpenStack 8 venv-openstack-designate-x86_64-5.0.3~dev7-12.45.1 as a component of HPE Helion OpenStack 8 venv-openstack-heat-x86_64-9.0.8~dev22-12.51.1 as a component of HPE Helion OpenStack 8 venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.46.1 as a component of HPE Helion OpenStack 8 venv-openstack-octavia-x86_64-1.0.6~dev3-12.47.1 as a component of HPE Helion OpenStack 8 venv-openstack-sahara-x86_64-7.0.5~dev4-11.46.1 as a component of HPE Helion OpenStack 8 openstack-heat-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 openstack-heat-api-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 openstack-heat-api-cfn-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 openstack-heat-api-cloudwatch-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 openstack-heat-doc-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 openstack-heat-engine-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 openstack-heat-plugin-heat_docker-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 openstack-heat-test-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 python-Werkzeug-0.12.2-3.6.2 as a component of SUSE OpenStack Cloud 8 python-heat-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud 8 venv-openstack-designate-x86_64-5.0.3~dev7-12.45.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-heat-x86_64-9.0.8~dev22-12.51.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.46.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-octavia-x86_64-1.0.6~dev3-12.47.1 as a component of SUSE OpenStack Cloud 8 venv-openstack-sahara-x86_64-7.0.5~dev4-11.46.1 as a component of SUSE OpenStack Cloud 8 openstack-heat-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud 9 openstack-heat-api-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud 9 openstack-heat-api-cfn-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud 9 openstack-heat-engine-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud 9 openstack-heat-plugin-heat_docker-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud 9 openstack-swift-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud 9 openstack-swift-account-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud 9 openstack-swift-container-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud 9 openstack-swift-object-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud 9 openstack-swift-proxy-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud 9 python-Werkzeug-0.14.1-3.6.2 as a component of SUSE OpenStack Cloud 9 python-heat-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud 9 python-swift-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud 9 venv-openstack-designate-x86_64-7.0.2~dev2-3.41.2 as a component of SUSE OpenStack Cloud 9 venv-openstack-heat-x86_64-11.0.4~dev4-3.43.2 as a component of SUSE OpenStack Cloud 9 venv-openstack-keystone-x86_64-14.2.1~dev9-3.42.2 as a component of SUSE OpenStack Cloud 9 venv-openstack-magnum-x86_64-7.2.1~dev1-4.41.3 as a component of SUSE OpenStack Cloud 9 venv-openstack-octavia-x86_64-3.2.3~dev7-4.41.2 as a component of SUSE OpenStack Cloud 9 venv-openstack-sahara-x86_64-9.0.2~dev15-3.41.2 as a component of SUSE OpenStack Cloud 9 venv-openstack-swift-x86_64-2.19.3~dev3-2.36.3 as a component of SUSE OpenStack Cloud 9 openstack-heat-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-api-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-api-cfn-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-api-cloudwatch-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-doc-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-engine-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-plugin-heat_docker-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-test-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 python-Werkzeug-0.12.2-3.6.2 as a component of SUSE OpenStack Cloud Crowbar 8 python-heat-9.0.8~dev22-3.30.3 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-heat-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-api-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-api-cfn-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-engine-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-plugin-heat_docker-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-swift-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-swift-account-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-swift-container-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-swift-object-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-swift-proxy-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 9 python-Werkzeug-0.14.1-3.6.2 as a component of SUSE OpenStack Cloud Crowbar 9 python-heat-11.0.4~dev4-3.24.4 as a component of SUSE OpenStack Cloud Crowbar 9 python-swift-2.19.3~dev3-3.6.3 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-doc as a component of SUSE OpenStack Cloud 9 openstack-heat-doc as a component of SUSE OpenStack Cloud Crowbar 9 An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system. CVE-2023-1625 HPE Helion OpenStack 8:openstack-heat-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:openstack-heat-api-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:openstack-heat-api-cfn-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:openstack-heat-doc-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:openstack-heat-engine-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:openstack-heat-test-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:python-Werkzeug-0.12.2-3.6.2 HPE Helion OpenStack 8:python-heat-9.0.8~dev22-3.30.3 HPE Helion OpenStack 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.45.1 HPE Helion OpenStack 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.51.1 HPE Helion OpenStack 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.46.1 HPE Helion OpenStack 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.47.1 HPE Helion OpenStack 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.46.1 SUSE OpenStack Cloud 8:openstack-heat-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:openstack-heat-api-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:openstack-heat-api-cfn-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:openstack-heat-doc-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:openstack-heat-engine-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:openstack-heat-test-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:python-Werkzeug-0.12.2-3.6.2 SUSE OpenStack Cloud 8:python-heat-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud 8:venv-openstack-designate-x86_64-5.0.3~dev7-12.45.1 SUSE OpenStack Cloud 8:venv-openstack-heat-x86_64-9.0.8~dev22-12.51.1 SUSE OpenStack Cloud 8:venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.46.1 SUSE OpenStack Cloud 8:venv-openstack-octavia-x86_64-1.0.6~dev3-12.47.1 SUSE OpenStack Cloud 8:venv-openstack-sahara-x86_64-7.0.5~dev4-11.46.1 SUSE OpenStack Cloud 9:openstack-heat-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud 9:openstack-heat-api-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud 9:openstack-heat-api-cfn-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud 9:openstack-heat-engine-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud 9:openstack-heat-plugin-heat_docker-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud 9:openstack-swift-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud 9:openstack-swift-account-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud 9:openstack-swift-container-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud 9:openstack-swift-object-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud 9:openstack-swift-proxy-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud 9:python-Werkzeug-0.14.1-3.6.2 SUSE OpenStack Cloud 9:python-heat-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud 9:python-swift-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud 9:venv-openstack-designate-x86_64-7.0.2~dev2-3.41.2 SUSE OpenStack Cloud 9:venv-openstack-heat-x86_64-11.0.4~dev4-3.43.2 SUSE OpenStack Cloud 9:venv-openstack-keystone-x86_64-14.2.1~dev9-3.42.2 SUSE OpenStack Cloud 9:venv-openstack-magnum-x86_64-7.2.1~dev1-4.41.3 SUSE OpenStack Cloud 9:venv-openstack-octavia-x86_64-3.2.3~dev7-4.41.2 SUSE OpenStack Cloud 9:venv-openstack-sahara-x86_64-9.0.2~dev15-3.41.2 SUSE OpenStack Cloud 9:venv-openstack-swift-x86_64-2.19.3~dev3-2.36.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cfn-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-api-cloudwatch-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-doc-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-engine-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-plugin-heat_docker-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:openstack-heat-test-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 8:python-Werkzeug-0.12.2-3.6.2 SUSE OpenStack Cloud Crowbar 8:python-heat-9.0.8~dev22-3.30.3 SUSE OpenStack Cloud Crowbar 9:openstack-heat-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud Crowbar 9:openstack-heat-api-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud Crowbar 9:openstack-heat-api-cfn-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud Crowbar 9:openstack-heat-engine-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud Crowbar 9:openstack-heat-plugin-heat_docker-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud Crowbar 9:openstack-swift-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud Crowbar 9:openstack-swift-account-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud Crowbar 9:openstack-swift-container-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud Crowbar 9:openstack-swift-object-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud Crowbar 9:openstack-swift-proxy-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud Crowbar 9:python-Werkzeug-0.14.1-3.6.2 SUSE OpenStack Cloud Crowbar 9:python-heat-11.0.4~dev4-3.24.4 SUSE OpenStack Cloud Crowbar 9:python-swift-2.19.3~dev3-3.6.3 SUSE OpenStack Cloud 9:openstack-heat-doc SUSE OpenStack Cloud Crowbar 9:openstack-heat-doc important 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H