Missing authentication in openstack-tripleo-heat-templates
Priority LOW 28CWE-306Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Partial Red Hat: 3 fixed, 4 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-306.
Summary
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
Why it matters now
EPSS 0.00287 21st percentileScored 2026-11-07
Fix Partial tripleo-heat-templates (PyPI): 7.0.6Red Hat: 3 advisoriesRed Hat: 3 fixed, 4 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenStack | openstack-tripleo-heat-templates | Newton, Ocata, Pike and possibly older | — | No fix listed | CNA |
| — | tripleo-heat-templates (PyPI) | before 7.0.6 | 7.0.6 | Patch available | GHSA-w8gx-hhcx-px6w |
- openstack-tripleo-heat-templates VendorOpenStack Affected Newton, Ocata, Pike and possibly older Fixed in — No fix listed CNA
- tripleo-heat-templates (PyPI) Vendor— Affected before 7.0.6 Fixed in 7.0.6 Patch available GHSA-w8gx-hhcx-px6w
Remediation
- Fix · GHSA-w8gx-hhcx-px6w tripleo-heat-templates (PyPI) Fixed in 7.0.6 Advisory →
Red Hat 3 advisories
- RHSA-2018:1627 Released 2018-05-18 · Red Hat rating ModerateRed Hat OpenStack Platform director security update
- Red Hat OpenStack Platform 11.0 openstack-tripleo-heat-templates-6.2.12-2.el7ost, puppet-tripleo-6.5.10-3.el7ost
- RHSA-2018:1593 Released 2018-05-17 · Red Hat rating ModerateRed Hat OpenStack Platform director security update
- Red Hat OpenStack Platform 10.0 openstack-tripleo-heat-templates-5.3.10-1.el7ost, puppet-tripleo-5.6.8-6.el7ost
- RHSA-2018:0602 Released 2018-03-28 · Red Hat rating Moderateopenstack-tripleo-common and openstack-tripleo-heat-templates update
- Red Hat OpenStack Platform 12.0 openstack-tripleo-heat-templates-7.0.9-8.el7ost
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Director | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 8 (Liberty) Director | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 9 (Mitaka) Director | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 10.0 | Fixed | RHSA-2018:1593 |
| Red Hat OpenStack Platform 11.0 | Fixed | RHSA-2018:1627 |
| Red Hat OpenStack Platform 12.0 | Fixed | RHSA-2018:0602 |
Not affected: 1 product
- Red Hat OpenStack Platform 12 (Pike)
Timeline
- 2026-10-02 Threatist record created from CVE-2017-12155
- 2026-10-03 Alias added: GHSA-w8gx-hhcx-px6w
References
Other 4
- https://bugzilla.redhat.com/show_bug.cgi?id=1489360
- https://github.com/openstack/tripleo-heat-templates
- https://opendev.org/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4
- https://opendev.org/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30
More OpenStack vulnerabilities
- TI-2026-78562 Incorrect authorization in OpenStack Manila share operations CVSS 3.1CRITICAL 9.9
- TI-2026-63467 Code injection in OpenStack Octavia CVSS 4.0CRITICAL 9.4
- TI-2017-13226 The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before… CVSS 3.1CRITICAL 9.8
- TI-2026-69629 OpenStack Mistral flaw lets users change other projects' resources CVSS 4.0HIGH 7.2
- TI-2026-69623 Command injection in OpenStack Mistral std.ssh_proxied action CVSS 4.0HIGH 8.7
- TI-2022-17779 Improper privilege management in OpenStack CVSS 3.1HIGH 8.8
Sources
- CVE-2017-12155 · CVE Program
- CVE-2017-12155 · NVD
- FIRST EPSS
- GHSA-w8gx-hhcx-px6w · GitHub Advisory Database · CC BY 4.0
- CVE-2017-12155 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences