CVE-2024-29156: Infoleak
In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.
Other sources
The Sangfor Security Research Team has identified a critical security vulnerability in the Murano component of OpenStack. This vulnerability allows ordinary users capable of importing and deploying app packages to access sensitive information within OpenStack services. Specifically, through this exploit, unauthorised users can obtain Murano service account credentials, potentially escalating their privileges to an administrator level. Subsequently, unauthorised users can gain complete control over various resources, including user roles, hosts, and networks.
The exploit allows access to Murano service's oslo configuration storage, thereby exposing critical Murano service account credentials, granting unauthorised users administrative privileges.
— Red Hat
YAQL before 3.0.0 is used in Murano, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.
— GitHub
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29156?
CVE-2024-29156 is classified as a critical vulnerability due to its potential for sensitive data leakage.
How do I fix CVE-2024-29156?
To fix CVE-2024-29156, upgrade YAQL to version 3.0.0 or later.
What versions of Murano are affected by CVE-2024-29156?
CVE-2024-29156 affects OpenStack Murano through version 16.0.0.
What types of information could be leaked due to CVE-2024-29156?
CVE-2024-29156 could lead to leakage of sensitive service account information.
Is the vulnerability CVE-2024-29156 specific to certain OpenStack components?
Yes, CVE-2024-29156 specifically affects the Murano service and the YAQL language prior to version 3.0.0.