CVE - CVE-2014-3801

CVE-ID
CVE-2014-3801	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:67505 URL:http://www.securityfocus.com/bid/67505 CONFIRM:https://bugs.launchpad.net/heat/+bug/1311223 MLIST:[oss-security] 20140520 CVE request for vulnerability in OpenStack Heat URL:http://www.openwall.com/lists/oss-security/2014/05/20/1 MLIST:[oss-security] 20140520 Re: CVE request for vulnerability in OpenStack Heat URL:http://www.openwall.com/lists/oss-security/2014/05/20/6 REDHAT:RHSA-2014:1687 URL:http://rhn.redhat.com/errata/RHSA-2014-1687.html UBUNTU:USN-2249-1 URL:http://www.ubuntu.com/usn/USN-2249-1
Assigning CNA
MITRE Corporation
Date Record Created
20140520	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20140520)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)