Red Hat Security Advisory

RHSA-2018:0602

openstack-tripleo-common and openstack-tripleo-heat-templates update

Released 2018-03-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 12.0 openstack-tripleo-heat-templates-7.0.9-8.el7ost

Fixes 1 record

TI-2017-08946 CVE-2017-12155 · GHSA-w8gx-hhcx-px6w

Missing authentication in openstack-tripleo-heat-templates

LOW 28

A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable.

CVSS 3.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00287 Published 2017-12-12 Partial fix · 7.0.6 CWE-306