CVE-2023-1625

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-202

Affected software

Vendor	Product	Versions
n/a	openstack-heat	—
Red Hat	Red Hat OpenStack Platform 13 (Queens)	—
Red Hat	Red Hat OpenStack Platform 16.1	—
Red Hat	Red Hat OpenStack Platform 16.2	—
Red Hat	Red Hat OpenStack Platform 17.0	—
RDO	OpenStack RDO	—

References

https://access.redhat.com/security/cve/CVE-2023-1625Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181621Issue Tracking, Third Party Advisory
https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcbPatch
https://launchpad.net/bugs/1999665Exploit, Issue Tracking, Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-1625Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181621Issue Tracking, Third Party Advisory
https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcbPatch
https://launchpad.net/bugs/1999665Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Sep 24, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-16267.8A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in CVE-2023-16275.5A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing CVE-2023-16285.5A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library CVE-2023-16297.8A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x22201 CVE-2023-16305.5A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the func CVE-2023-16315.5A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in t CVE-2023-16335.5A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gai CVE-2023-16349.8A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.p CVE-2023-16356.1A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the CVE-2023-16365.0A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one CVE-2023-16375.5A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management CVE-2023-16385.5A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x800