CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.

• CWE-202

• https://access.redhat.com/security/cve/CVE-2023-1625Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2181621Issue Tracking, Third Party Advisory
• https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcbPatch
• https://launchpad.net/bugs/1999665Exploit, Issue Tracking, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2023-1625Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2181621Issue Tracking, Third Party Advisory
• https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcbPatch
• https://launchpad.net/bugs/1999665Exploit, Issue Tracking, Third Party Advisory

Published

Sep 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1619Multiple WAGO devices in multiple versions may allow an auth…4.9
• CVE-2023-1620Multiple WAGO devices in multiple versions may allow an auth…4.9
• CVE-2023-1621An issue has been discovered in GitLab EE affecting all vers…6.5
• CVE-2023-1622Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-1623The Custom Post Type UI WordPress plugin before 1.13.5 does …6.5
• CVE-2023-1624The WPCode WordPress plugin before 2.0.9 has a flawed CSRF w…6.5
• CVE-2023-1626A vulnerability was found in Jianming Antivirus 16.2.2022.41…7.8
• CVE-2023-1627A vulnerability was found in Jianming Antivirus 16.2.2022.41…5.5
• CVE-2023-1628A vulnerability classified as problematic has been found in …5.5
• CVE-2023-1629A vulnerability classified as critical was found in JiangMin…7.8
• CVE-2023-1630A vulnerability, which was classified as problematic, has be…5.5
• CVE-2023-1631A vulnerability, which was classified as problematic, was fo…5.5