OpenStack Heat

Heat template network discovery

Bug #2032682 reported by John Herdman on 2023-08-22

This bug affects 1 person

	Status	Importance	Assigned to
OpenStack Dashboard (Horizon)	New	Undecided	Unassigned
OpenStack Heat	New	Undecided	Unassigned
OpenStack Security Advisory	New	Undecided	Unassigned

Bug Description

While this issue appears fixed for any localhost calls (https://bugs.launchpad.net/ossa/+bug/1606500), Horizon/Heat still returns additional information when an IP is provided. For instance, when using http://x.x.x.x:22, if the IP is reachable, the SSH banner is returned. This works for any IP:port combination beyond localhost.

It appears as though it should only return "Template format version not found". This occurs when using the URL source, as well as when using direct input and providing the source in the user_data / get_file format.

CVE References

2016-9185

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.