CVE-2014-3801
OpenStack Heat template URL information leakage
CVE-2014-3801 is a low vulnerability (CVSS 3.5) in Openstack Heat, published May 23, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. Fixed in openstack-heat 5.0.0a0.
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
Exploit likelihood
What each source reports
NVD Score used
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
CVE-2014-3801- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
CVE-2014-3801- Updated
- 2026-11-02
EUVDEUVD-2022-3128 No score
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
EUVD-2022-3128- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-86qj-4h55-fvpw No score
OpenStack Heat template URL information leakage
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
GHSA-86qj-4h55-fvpw- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
CVE-2014-3801- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-3801 No score
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
DEBIAN-CVE-2014-3801- Updated
- 2026-11-02
Show 4 moreShow less
OSVGHSA-86qj-4h55-fvpw No score
OpenStack Heat template URL information leakage
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
GHSA-86qj-4h55-fvpw- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVPYSEC-2026-889 No score
OpenStack Heat template URL information leakage
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
PYSEC-2026-889- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3801 No score
OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.
- Record
UBUNTU-CVE-2014-3801- Updated
- 2026-11-02
OSVUSN-2249-1 No score
heat vulnerability
Jason Dunsmore discovered that OpenStack heat did not properly restrict access to template information. A remote authenticated attacker could exploit this to see URL provider templates of other tenants for a limited time.
- Record
USN-2249-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openstack-heatPyPI |
before 5.0.0a0 | 5.0.0a0 |
heatDebian:12 |
before 2014.1-4 | 2014.1-4 |
heatDebian:13 |
before 2014.1-4 | 2014.1-4 |
heatDebian:14 |
before 2014.1-4 | 2014.1-4 |
openstack-heatRed Hat:openstack:4::el6 |
before 0:2013.2.4-1.el6ost | 0:2013.2.4-1.el6ost |
openstack-heat-apiRed Hat:openstack:4::el6 |
before 0:2013.2.4-1.el6ost | 0:2013.2.4-1.el6ost |
openstack-heat-api-cfnRed Hat:openstack:4::el6 |
before 0:2013.2.4-1.el6ost | 0:2013.2.4-1.el6ost |
openstack-heat-api-cloudwatchRed Hat:openstack:4::el6 |
before 0:2013.2.4-1.el6ost | 0:2013.2.4-1.el6ost |
openstack-heat-commonRed Hat:openstack:4::el6 |
before 0:2013.2.4-1.el6ost | 0:2013.2.4-1.el6ost |
openstack-heat-engineRed Hat:openstack:4::el6 |
before 0:2013.2.4-1.el6ost | 0:2013.2.4-1.el6ost |
heatUbuntu:14.04:LTS |
before 2014.1-0ubuntu1.1, plus listed versions 2013.2~rc2-0ubuntu12013.2-0ubuntu12014.1~b1-0ubuntu22014.1~b2-0ubuntu12014.1~b3-0ubuntu1 Show 4 moreShow less2014.1~rc1-0ubuntu12014.1~rc2-0ubuntu12014.1~rc2-0ubuntu32014.1-0ubuntu1 |
2014.1-0ubuntu1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/67505
ubuntu.com/usn/USN-2249-1
openwall.com/lists/oss-security/2014/05/20/1
bugs.launchpad.net/heat/+bug/1311223
rhn.redhat.com/errata/RHSA-2014-1687.html
Show 23 moreShow less
nvd.nist.gov/vuln/detail/CVE-2014-3801
git.openstack.org/cgit/openstack/heat/commit?id=03dd894de4ad905dc170e358fad27d9c8ed62a73
web.archive.org/web/20200229061233/https://www.securityfocus.com/bid/67505
github.com/advisories/GHSA-86qj-4h55-fvpw
security-tracker.debian.org/tracker/CVE-2014-3801
pypi.org/project/openstack-heat
access.redhat.com/errata/RHSA-2014:1687
wiki.openstack.org/wiki/ReleaseNotes/2013.2.4
bugzilla.redhat.com/show_bug.cgi?id=1082672
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1687.json
cve.org/CVERecord?id=CVE-2014-3801
ubuntu.com/security/CVE-2014-3801
launchpad.net/bugs/1311223