PT-2024-38264 · Openstack+1 · Openstack+1

Pedro Sampaio · CVE-2024-7319 · Published 2024-08-02 · Updated 2026-07-07

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions OpenStack versions 16.1 through 17.0

Description A vulnerability in the stack abandon command could expose sensitive information.

Recommendations For versions 16.1 through 17.0, upgrade to version 22.0.2 to maintain data security.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-7319

GHSA-2FQR-CX7Q-3PH8

PYSEC-2026-1750

Affected Products

Debian

Openstack

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7319.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2024-7319 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2258810 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-1750 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2fqr-cx7q-3ph8 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-7319 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2024-7319 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7319 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-7319 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-7319 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-7319 · Security Note
• https://ubuntu.com/security/CVE-2024-7319 · Vendor Advisory
• https://github.com/openstack/heat · Note
• https://pypi.org/project/openstack-heat · Note
• https://twitter.com/Hossted_OSS/status/1823010501770489922 · Twitter Post