PT-2024-38264 · Openstack+1 · Openstack+1

Pedro Sampaio · Published 2024-08-02 · Updated 2024-10-07 · CVE-2024-7319

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions OpenStack versions 16.1 through 17.0

Description A vulnerability in the stack abandon command could expose sensitive information.

Recommendations For versions 16.1 through 17.0, upgrade to version 22.0.2 to maintain data security.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-7319

GHSA-2FQR-CX7Q-3PH8

Affected Products

Debian

Openstack

References · 15

• https://cve.org/CVERecord?id=CVE-2024-7319 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2258810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7319 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-7319 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2024-7319 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2fqr-cx7q-3ph8 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-7319 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-7319 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-7319 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-7319 · Vendor Advisory
• https://github.com/openstack/heat · Note
• https://twitter.com/Hossted_OSS/status/1823010501770489922 · Twitter Post
• https://t.me/cvedetector/2379 · Telegram Post
• https://storyboard.openstack.org/#!/story/2011007 · Note
• https://t.me/cvenotify/95824 · Telegram Post