An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.
| Software | From | Fixed in |
|---|---|---|
| openstack / nova | 19.0.0 | 19.0.2 |
| openstack / nova | - | 17.0.12 |
| openstack / nova | 18.0.0 | 18.2.2 |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| canonical / ubuntu_linux | 19.04 | 19.04.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |
| redhat / openstack | 10 | 10.x |
| redhat / openstack | 14 | 14.x |
| redhat / openstack | 13 | 13.x |
| debian / debian_linux | 10.0 | 10.0.x |