Read the docs
Red Hat Security Advisory

RHSA-2015:0791

Red Hat Enterprise Linux OpenStack Platform Installer update

Released 2015-04-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 51

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspe…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05179 Published 2015-04-10 Partial fix CWE-255