PYSEC-2016-35

vendorUSosv

view advisory published 2016-04-11Licence: CC-BY-4.0

The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2015-5303US	high7.5	1.67% (77th)	—	2016-04-11
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveragi…

references

External citations — patches, advisories, analysis.

https://access.redhat.com/errata/RHSA-2015:2650ADVISORY
https://bugs.launchpad.net/tripleo/+bug/1516027WEB
https://github.com/advisories/GHSA-m94p-8942-pm49ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan