Описание
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 5.2.0-1 |
| devel | DNE | |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 5.2.0-1 |
| esm-apps/xenial | ignored | end of ESM support, was needed |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| hirsute | DNE | |
| impish | DNE |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.
The TripleO Heat templates (tripleo-heat-templates), when deployed via ...
OpenStack TripleO Heat templates spoof metadata requests
EPSS
5 Medium
CVSS2
7.5 High
CVSS3