PT-2016-3681

CVE-2015-5303

·

Published

2016-04-11

·

Updated

2022-05-17

Description by

CVSS 4.0
8.7
High
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions tripleo-heat-templates (affected versions not specified)
Description The issue allows remote attackers to spoof OpenStack Networking metadata requests. This is possible by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter when the TripleO Heat templates are deployed via the command-line interface.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
CWE-254
Related identifiers
CVE-2015-5303
GHSA-M94P-8942-PM49
PYSEC-2016-35
RHSA-2015:2650
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com