CVE-2023-1625: Openstack Heat

Medium severity, CVSS 5.0. EPSS: 0.7% chance of exploitation in the next 30 days.

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

Affected products

• Openstack Heat: affected versions not specified
• Red Hat Openstack Platform: version 13.0 only; version 16.1 only; version 16.2 only; version 17.0 only

Published 2023-09-24. Last modified 2026-06-17.