Medium severity4.3NVD Advisory· Published Nov 4, 2016· Updated Jun 17, 2026
CVE-2016-9185
CVE-2016-9185
Description
In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:openstack:heat:5.0.3:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:openstack:heat:5.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:heat:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:heat:6.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:heat:7.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=5.0.3, >=6.0.0 <=6.1.0, ==7.0.0
Patches
Vulnerability mechanics
References
5- www.securityfocus.com/bid/94205nvdThird Party AdvisoryVDB Entry
- bugs.launchpad.net/ossa/+bug/1606500nvdIssue TrackingThird Party Advisory
- access.redhat.com/errata/RHSA-2017:1450nvd
- access.redhat.com/errata/RHSA-2017:1456nvd
- access.redhat.com/errata/RHSA-2017:1464nvd
News mentions
0No linked articles in our index yet.