What is the CVSS score of CVE-2023-1625?

CVE-2023-1625 has a CVSS 3.1 base score of 5.0 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N. EPSS exploitation probability: 0.7%.

Is there a public PoC exploit available for CVE-2023-1625?

Yes, a public proof-of-concept exploit is available for CVE-2023-1625. Prioritise patching immediately. EPSS: 0.7%.

Is there a patch available for CVE-2023-1625?

Yes, a patch is available for CVE-2023-1625. Update the affected software to the latest version immediately.

Heat CVE-2023-1625

MEDIUM

Exposure of Sensitive Information Through Data Queries (CWE-202)

2023-09-24 secalert@redhat.com

Information Disclosure Heat Openstack Platform

5.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Sep 24, 2023 - 01:15 nvd

MEDIUM 5.0

DescriptionNVD

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

AnalysisAI

An information leak was discovered in OpenStack heat. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-202. An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system. Affected products include: Openstack Heat, Redhat Openstack Platform.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.