VULNERABILITY INTELLIGENCE
CVE-2014-3801
CVSS score3.5 LOW
EPSS probability1.63%
CISA KEVNot currently listed
Published2014-05-23
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:N/A:N
Description
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor