CVE-2021-4180 Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
An attacker can discover internal IP addresses or hostnames by inspecting visible configuration parameters in OpenStack TripleO Heat Templates.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-4180?
CVE-2021-4180 is a medium-severity vulnerability in Redhat Openstack, published on 23 Mar 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
Which versions are affected by CVE-2021-4180?
3 open source packages ship an affected version, including tripleo-heat-templates. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
tripleo-heat-templates PyPI | All versions | 11.6.1 |
tripleo-heat-templates PyPI | All versions | 11.6.1 |
tripleo-heat-templates PyPI | All versions | 11.6.1 |
Linux distribution packages (2)
openstack-tripleo-heat-templates Red Hat:openstack:16.1::el8 | All versions | 0:11.3.2-1.20221013153262.el8ost |
openstack-tripleo-heat-templates Red Hat:openstack:16.2::el8 | All versions | 0:11.6.1-2.20220116004912.el8ost |
Products include Openstack Tripleo Heat Templates, Redhat Openstack.
How do I fix CVE-2021-4180?
Upgrade tripleo-heat-templates to 11.6.1 or later.
Is CVE-2021-4180 being exploited?
There is no known exploitation of CVE-2021-4180 in the wild and no public exploit code.
Other vulnerabilities in Redhat Openstack
- CVE-2018-10898 Hardcoded credentials in openstack-tripleo-heat-templates
- CVE-2015-5271 TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers
- CVE-2015-5303 OpenStack TripleO Heat templates spoof metadata requests
- CVE-2021-3585 Information disclosure in openstack/tripleo-heat-templates.
Sources
Also known as GHSA-hm3x-jwwf-jpr9, PYSEC-2026-753, RHSA-2022:0995, RHSA-2022:8796, UBUNTU-CVE-2021-4180.