CVE-2021-4180
Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
- Record
CVE-2021-4180- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-200, CWE-668
- Updated
- 2026-11-02
CVE List No score
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
- Record
CVE-2021-4180- Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2022-1443 No score
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
- Record
EUVD-2022-1443- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hm3x-jwwf-jpr9
Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. A patch is available on the master branch and anticipated to be part of version 11.6.1.
- Record
GHSA-hm3x-jwwf-jpr9- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200, CWE-668
- Updated
- 2026-11-02
OSVGHSA-hm3x-jwwf-jpr9
Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. A patch is available on the master branch and anticipated to be part of version 11.6.1.
- Record
GHSA-hm3x-jwwf-jpr9- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200, CWE-668
- Updated
- 2026-11-02
OSVPYSEC-2026-753
Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. A patch is available on the master branch and anticipated to be part of version 11.6.1.
- Record
PYSEC-2026-753- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2022:0995
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-tripleo-heat-templates) security update
- Record
RHSA-2022:0995- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2022:8796
Red Hat Security Advisory: Red Hat OpenStack 16.1.9 (openstack-tripleo-heat-templates) security update
- Record
RHSA-2022:8796- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-4180
An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
- Record
UBUNTU-CVE-2021-4180- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tripleo-heat-templatesPyPI |
through 11.6.0 | 11.6.1 |
tripleo-heat-templatesPyPI |
before 11.6.1, plus listed versions 0.5.60.6.00.6.10.6.20.6.3 Show 45 moreShow less0.6.40.7.00.7.10.7.20.7.30.7.40.7.50.7.60.7.70.7.80.7.90.8.00.8.10.8.100.8.110.8.120.8.130.8.140.8.20.8.30.8.40.8.50.8.60.8.70.8.80.8.910.0.010.1.010.2.010.3.010.4.010.5.010.6.010.6.110.6.211.0.011.1.011.2.011.3.011.3.111.4.011.5.011.6.02.0.02.1.0 |
11.6.1 |
openstack-tripleo-heat-templatesRed Hat:openstack:16.2::el8 |
before 0:11.6.1-2.20220116004912.el8ost | 0:11.6.1-2.20220116004912.el8ost |
openstack-tripleo-heat-templatesRed Hat:openstack:16.1::el8 |
before 0:11.3.2-1.20221013153262.el8ost | 0:11.3.2-1.20221013153262.el8ost |
tripleo-heat-templatesUbuntu:16.04:LTS |
All versions, plus listed versions 0.6.1-1 |
None known |
tripleo-heat-templatesUbuntu:18.04:LTS |
All versions, plus listed versions 5.2.0-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-4180 is a medium vulnerability (CVSS 4.3) in [unknown] Openstack-tripleo-heat-templates, published March 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in tripleo-heat-templates 11.6.1.
References
bugzilla.redhat.com/show_bug.cgi?id=2035793
nvd.nist.gov/vuln/detail/CVE-2021-4180
github.com/openstack/tripleo-heat-templates/commit/160936df134a471cfd245bd60964046027a571ea
bugs.launchpad.net/tripleo/+bug/1955397
Show 88 moreShow less
pypi.org/project/tripleo-heat-templates
access.redhat.com/errata/RHSA-2022:0995
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0995.json
cve.org/CVERecord?id=CVE-2021-4180
ubuntu.com/security/CVE-2021-4180
Left out here: 101 versions. The JSON record has them.