CVE-2017-2621: Medium severity openstack heat vulnerability
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
Other sources
The directory /var/log/heat is world readable and contains log files that are readable, which can result in the exposure of sensitive information. The 'other readable/execute' bits need to be removed from the /var/log/heat directory:
[stack@instack ~]$ ls -la /var/log/heat total 39376 drwxr-xr-x. 2 heat root 4096 Feb 9 01:07 . drwxr-xr-x. 31 root root 4096 Feb 9 01:02 .. -rw-r--r--. 1 heat heat 201578 Feb 9 20:09 heat-api-cfn.log -rw-r--r--. 1 heat heat 4899693 Feb 9 20:09 heat-api.log -rw-r--r--. 1 heat heat 35193112 Feb 9 23:40 heat-engine.log
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2621?
CVE-2017-2621 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2017-2621?
To fix CVE-2017-2621, you should update OpenStack Orchestration (heat) to version 8.0.0 or higher, or ensure that versions 6.1.0 and 7.0.2 are patched.
Which versions of OpenStack are affected by CVE-2017-2621?
CVE-2017-2621 affects OpenStack Orchestration (heat) versions prior to 8.0.0, as well as Red Hat OpenStack versions 9 and 10.
What is the nature of the vulnerability in CVE-2017-2621?
CVE-2017-2621 is an access control flaw that allows unauthorized users to read sensitive information from the world-readable log directory.
Can CVE-2017-2621 be exploited remotely?
CVE-2017-2621 requires local access to the system, meaning it cannot be exploited remotely.