PyPi: Tripleo-Heat-Templates

CVE-2023-6725

Safety vulnerability ID: 71382

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Mar 15, 2024 Updated at Nov 29, 2024

Scan your Python projects for vulnerabilities →

Advisory

Tripleo-heat-templates is affected by CVE-2023-6725: An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

Affected package

tripleo-heat-templates

Latest version: 18.0.0

Heat templates for deploying OpenStack with OpenStack.

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application