Red Hat Security Advisory

RHSA-2017:0025

puppet-tripleo security update

Released 2017-01-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 puppet-tripleo-5.4.0-4.el7ost

Fixes 1 record

TI-2016-07820 CVE-2016-9599 · GHSA-f29f-jrc4-qmh5

Improper access control in puppet-tripleo

LOW 34

puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.00823 Published 2018-04-23 Fixed CWE-284