Read the docs
TI-2017-01878 Aliases CVE-2017-2627GHSA-mqhr-f34x-gw3r

Path traversal in Red Hat openstack-tripleo-common

Priority LOW 37CWE-22Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA and Red Hat.

Summary

A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal with '..' and it grants full passwordless root access to the validations user.

Why it matters now

EPSS 0.00661 51st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red Hatopenstack-tripleo-commonAs shipped with Red Hat Openstack Enterprise 10 and 11—No fix listedCNA
  • openstack-tripleo-common VendorRed Hat Affected As shipped with Red Hat Openstack Enterprise 10 and 11 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*10VulnerableRed Hat
cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*11VulnerableRed Hat
cpe:2.3:a:openstack:tripleo-common:-:*:*:*:*:*:*:*not specified by NVDVulnerableOpenStack
  • cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·Red Hat
  • cpe:2.3:a:openstack:tripleo-common:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix yet
Red Hat OpenStack Platform 11 (Ocata)AffectedNo fix yet
Not affected: 3 products
  • Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Director
  • Red Hat OpenStack Platform 8 (Liberty) Director
  • Red Hat OpenStack Platform 9 (Mitaka) Director

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2627
  2. 2026-10-03 Alias added: GHSA-mqhr-f34x-gw3r
  3. 2026-10-07 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2016-05707 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB… CVSS 3.0CRITICAL 9.8
  • TI-2018-07980 Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis… CVSS 3.0CRITICAL 9.8
  • TI-2020-07599 Apache HTTP Server versions 2.4.20 to 2.4.43. CVSS 3.1HIGH 7.5
  • TI-2019-06950 Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a… CVSS 3.1HIGH 7.5
  • TI-2018-15768 Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume… CVSS 3.0HIGH 7.5
  • TI-2019-06949 Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a… CVSS 3.1HIGH 7.5
See all 209 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences