Описание
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
A flaw was found in OpenStack Mistral. When the API is exposed, a remote attacker can exploit certain endpoints to achieve arbitrary code execution. This allows the attacker to run malicious code on the system and potentially exfiltrate sensitive service credentials.
Меры по смягчению последствий
Restrict network access to the OpenStack Mistral API to trusted internal networks or hosts. Configure firewall rules to limit inbound connections to the Mistral API port (typically 8989) from untrusted sources, ensuring the API is not exposed to the public internet.
Example using firewall-cmd (adjust zones and ports as needed):
firewall-cmd --zone=public --remove-port=8989/tcp --permanent
firewall-cmd --zone=internal --add-port=8989/tcp --permanent
firewall-cmd --reload
This action may impact legitimate clients requiring external access to the Mistral API. A service reload or restart may be required for firewall changes to take full effect.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenStack Platform 16.2 | openstack-mistral | Not affected |
Показывать по
Дополнительная информация
Статус:
9.9 Critical
CVSS3
Связанные уязвимости
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Executio ...
OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed
9.9 Critical
CVSS3