Red Hat Security Advisory

RHSA-2015:0830

openstack-foreman-installer security update

Released 2015-04-16 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenStack Foreman augeas-1.0.0-7.el6_6.1, openstack-foreman-installer-2.0.34-1.el6ost, openstack-puppet-modules-2014.1.2-1.el6ost +3

Fixes 1 record

TI-2015-01654 CVE-2015-1842 · GHSA-x735-34cq-fm2q

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2…

MEDIUM 51

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspe…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05179 Published 2015-04-10 Partial fix CWE-255