PT-2016-3682 · Pivotal+1 · Rabbitmq+1

CVE-2015-5329

·

Publicado

2016-04-11

·

Atualizado

2023-02-13

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions tripleo-heat-templates versions 7.0
Description The issue is related to the improper use of configured RabbitMQ credentials in the TripleO Heat templates, making it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
Recommendations For version 7.0, consider updating the configuration to properly use the configured RabbitMQ credentials to prevent unauthorized access. As a temporary workaround, restrict access to the RabbitMQ service to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2015-5329
RHSA-2015:2650

Produtos afetados

Rabbitmq
Tripleo-Heat-Templates