CVE-2019-14433

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-08-09

Last modified

2024-08-05

Weaknesses

CWE-209

Affected products

• Ubuntu Linux (Canonical)
• Debian Linux (Debian)
• Nova (Openstack)
• Openstack (Redhat)

References

• http://www.openwall.com/lists/oss-security/2019/08/06/6
• https://access.redhat.com/errata/RHSA-2019:2622
• https://access.redhat.com/errata/RHSA-2019:2631
• https://access.redhat.com/errata/RHSA-2019:2652
• https://launchpad.net/bugs/1837877
• https://lists.debian.org/debian-lts-announce/2022/09/msg00018.html
• https://security.openstack.org/ossa/OSSA-2019-003.html
• https://usn.ubuntu.com/4104-1/