CVE-2019-14433

An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

Link	Resource
http://www.openwall.com/lists/oss-security/2019/08/06/6	Mailing List Third Party Advisory
https://security.openstack.org/ossa/OSSA-2019-003.html	Patch Vendor Advisory
https://launchpad.net/bugs/1837877	Issue Tracking Patch
https://usn.ubuntu.com/4104-1/	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2622	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2631	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2652	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00018.html	Mailing List Third Party Advisory

Configuration 1

cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:14:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

---

Published : 2019-08-09 07:15

Updated : 2022-10-27 04:01

---

NVD link : CVE-2019-14433

Mitre link : CVE-2019-14433

No products.

CWE-209