Comment 7 for bug 2048114

Revision history for this message
Andy Botting (andybotting) wrote : Re: OpenStack Murano Component Information Leakage

Thanks @kirualawliet for reporting this issue.

It does look quite serious if the oslo configuration context is able to be accessed from users own packages.

Your original post shows accessing the YAQL format method via a python shell, but can you demonstrate that the oslo configuration is able to be accessed from a Murano package?

Have you actually developed an app I can run against a running Murano service as a proof of concept?

Thanks,
Andy