Solution
Please Install the Updated Packages.
Insight
Jason Dunsmore discovered that OpenStack heat did not properly restrict access to template information. A remote authenticated attacker could exploit this to see URL provider templates of other tenants for a limited time.
Affected
heat on Ubuntu 14.04 LTS
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2014-3801 -
CVSS Base Score: 3.5
AV:N/AC:M/Au:S/C:P/I:N/A:N
Related Vulnerabilities