Red Hat Security Advisory

RHSA-2017:3227

openstack-aodh security update

Released 2017-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 openstack-aodh-3.0.4-1.el7ost, openstack-aodh-api-3.0.4-1.el7ost, openstack-aodh-common-3.0.4-1.el7ost +7

Fixes 1 record

TI-2017-09178 CVE-2017-12440 · GHSA-86cv-9gpx-6hwj

Aodh as packaged in Openstack Ocata and Newton before change-ID…

LOW 37

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme t…

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.02146 Published 2017-08-18 Partial fix · 6.0.1 CWE-306