https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T06:17:40.186245+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-3801 CVE-2014-3801 2026-09-30T06:17:40.237622+00:00

OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

 https://vulnerability.circl.lu/vuln/usn-2249-1 USN-2249-1 — heat vulnerability 2026-09-30T06:17:40.237726+00:00

Affected: Ubuntu:14.04:LTS: heat

Jason Dunsmore discovered that OpenStack heat did not properly restrict access to template information. A remote authenticated attacker could exploit this to see URL provider templates of other tenants for a limited time.