CVE-2019-14433

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-209

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2019/08/06/6Mailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2622Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2631Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2652Third Party Advisory
https://launchpad.net/bugs/1837877Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00018.htmlMailing List, Third Party Advisory
https://security.openstack.org/ossa/OSSA-2019-003.htmlPatch, Vendor Advisory
https://usn.ubuntu.com/4104-1/Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/08/06/6Mailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2622Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2631Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2652Third Party Advisory
https://launchpad.net/bugs/1837877Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00018.htmlMailing List, Third Party Advisory
https://security.openstack.org/ossa/OSSA-2019-003.htmlPatch, Vendor Advisory
https://usn.ubuntu.com/4104-1/Third Party Advisory

Timeline

Published: Aug 9, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-144377.8The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a resul CVE-2019-144387.8A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to CVE-2019-144397.5A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (eith CVE-2019-144416.5An issue was discovered in Libav 12.3. An access violation allows remote attackers to cause a denial of service (application crash), as demo CVE-2019-144426.5In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU cons CVE-2019-144436.5An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a d CVE-2019-144445.5apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (CVE-2019-144495.4An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can resu CVE-2019-14455.4A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsof CVE-2019-144509.8A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of CVE-2019-144519.8RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new print CVE-2019-144527.5Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP a