Red Hat Security AdvisoryRHSA-2015:0831
openstack-packstack and openstack-puppet-modules update
Released 2015-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-packstack-2014.1.1-0.46.dev1280.el7ost, openstack-packstack-doc-2014.1.1-0.46.dev1280.el7ost, openstack-packstack-puppet-2014.1.1-0.46.dev1280.el7ost +1
Fixes 1 record
Priority MEDIUM 51
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspe…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05179 · Published 2015-04-10 · Partial fix CWE-255
