PT-2016-3681

CVE-2015-5303

·

Publicado

2016-04-11

·

Atualizado

2022-05-17

Descrição por

CVSS 4.0
8.7
Alta
MétricasAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions tripleo-heat-templates (affected versions not specified)
Description The issue allows remote attackers to spoof OpenStack Networking metadata requests. This is possible by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter when the TripleO Heat templates are deployed via the command-line interface.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-254
Identificadores relacionados
CVE-2015-5303
GHSA-M94P-8942-PM49
PYSEC-2016-35
RHSA-2015:2650
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com