Vulnerability record · CVE-2023-1625 · published 24 September 2023

CVE-2023-1625: Openstack heat vulnerability

Openstack · Heat

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

5.0 CVSS 3.1 Medium EPSS 0.72% · top 48.1% CWE-202 · CWE-202

5.0CVSS 3.1 base score

0.72%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

8References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Heat Openstack

Openstack Platform Redhat

References

Link	Tags
https://access.redhat.com/security/cve/CVE-2023-1625	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181621	Issue TrackingThird Party Advisory
https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb	Patch
https://launchpad.net/bugs/1999665	ExploitIssue TrackingThird Party Advisory
https://access.redhat.com/security/cve/CVE-2023-1625	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181621	Issue TrackingThird Party Advisory
https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb	Patch
https://launchpad.net/bugs/1999665	ExploitIssue TrackingThird Party Advisory

Track CVE-2023-1625 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2023-44487HTTP/2 Rapid Reset stream cancellation denial of serviceThe HTTP/2 protocol permits a client to cancel many streams quickly, and the server's handling of those resets consumes disproportionate resources. T…KEVEPSS 100%analysed10 Oct 2023 9.9CVE-2020-10731Redhat openstack platform improper access control vulnerabilityA flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw cause…EPSS 0.89%31 Jul 2020 8.6CVE-2022-2132Dpdk data plane development kit vulnerabilityA permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a c…EPSS 2.2%31 Aug 2022 8.2CVE-2023-1668Cloudbase open vswitch vulnerabilityA flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying …EPSS 1.2%10 Apr 2023 8.1CVE-2024-8007Redhat openstack platform improper certificate validation vulnerabilityA flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker …EPSS 0.39%21 Aug 2024 8.1CVE-2022-23451Openstack barbican incorrect authorization vulnerabilityAn authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, mo…EPSS 1.3%6 Sep 2022 8.1CVE-2017-15114Redhat openstack platform improper certificate validation vulnerabilityWhen libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all no…EPSS 1.5%27 Nov 2017 7.5CVE-2023-5625Redhat openshift container platform for arm64 allocation without limits vulnerabilityA regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2…EPSS 0.80%1 Nov 2023

Source: NIST National Vulnerability Database (record CVE-2023-1625), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.