Red Hat Security AdvisoryRHSA-2015:2650
Red Hat Enterprise Linux OpenStack Platform 7 director update
Released 2015-12-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenStack 7.0 Director for RHEL 7 openstack-tripleo-heat-templates-0.8.6-94.el7ost, python-rdomanager-oscplugin-0.0.10-22.el7ost
Fixes 2 records
Priority LOW 36
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01697 · Published 2016-04-11 · Fixed in 0.8.10 CWE-254
Priority LOW 35
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obta…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.01517 · Published 2016-04-11 · Partial fix CWE-264
