id: PYSEC-2019-191
details: An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2,
  and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault
  condition due to an external exception, details of the underlying environment may
  be leaked in the response, and could include sensitive configuration or other data.
affected:
- package:
    name: nova
    ecosystem: PyPI
    purl: pkg:pypi/nova
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: 19.0.0
    - fixed: 19.0.2
    - introduced: "0"
    - fixed: 17.0.12
    - introduced: 18.0.0
    - fixed: 18.2.2
  versions:
  - 15.1.5
  - 16.1.6
  - 16.1.7
  - 16.1.8
  - 17.0.10
  - 17.0.11
  - 17.0.7
  - 17.0.8
  - 17.0.9
  - 18.0.2
  - 18.0.3
  - 18.1.0
  - 18.2.0
  - 18.2.1
  - 19.0.0
  - 19.0.1
references:
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2019/08/06/6
- type: WEB
  url: https://security.openstack.org/ossa/OSSA-2019-003.html
- type: WEB
  url: https://launchpad.net/bugs/1837877
- type: WEB
  url: https://usn.ubuntu.com/4104-1/
- type: ADVISORY
  url: https://access.redhat.com/errata/RHSA-2019:2622
- type: ADVISORY
  url: https://access.redhat.com/errata/RHSA-2019:2631
- type: ADVISORY
  url: https://access.redhat.com/errata/RHSA-2019:2652
- type: ADVISORY
  url: https://github.com/advisories/GHSA-pg64-r7rr-phv8
aliases:
- CVE-2019-14433
- GHSA-pg64-r7rr-phv8
modified: "2021-08-27T03:22:09.327110Z"
published: "2019-08-09T19:15:00Z"