Vulnerability Description
An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openstack | Nova | < 17.0.12 |
| Canonical | Ubuntu Linux | 16.04 |
| Redhat | Openstack | 10 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2019/08/06/6Mailing ListThird Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2622Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2631Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2652Third Party Advisory
- https://launchpad.net/bugs/1837877Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00018.htmlMailing ListThird Party Advisory
- https://security.openstack.org/ossa/OSSA-2019-003.htmlPatchVendor Advisory
- https://usn.ubuntu.com/4104-1/Third Party Advisory
- http://www.openwall.com/lists/oss-security/2019/08/06/6Mailing ListThird Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2622Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2631Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2652Third Party Advisory
- https://launchpad.net/bugs/1837877Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00018.htmlMailing ListThird Party Advisory
- https://security.openstack.org/ossa/OSSA-2019-003.htmlPatchVendor Advisory
FAQ
What is CVE-2019-14433?
CVE-2019-14433 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exceptio...
How severe is CVE-2019-14433?
CVE-2019-14433 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-14433?
Check the references section above for vendor advisories and patch information. Affected products include: Openstack Nova, Canonical Ubuntu Linux, Redhat Openstack, Debian Debian Linux.