VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jul 27, 2018· Updated Jun 17, 2026

CVE-2017-2621

CVE-2017-2621

Description

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • OpenStack/Heat
    cpe:2.3:a:openstack:heat:*:*:*:*:*:*:*:*
    Range: <8.0.0
  • Red Hat/Openstack3 versions
    cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*
    • (no CPE)range: openstack-heat-8.0.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.