CVE-2016-9185
Medium
Description
In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.
SeverityMedium
CVSS4.3
Exploit probability—
ProductOpenstack Heat
PublishedNov 4, 2016
First seenNov 4, 2016
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack heat | 5.0.3, 6.0.0, 6.1.0, 7.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.