CVE-2015-5303 OpenStack TripleO Heat templates spoof metadata requests
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi tripleo-heat-templates(PyPI) | < 0.8.10 | 0.8.10 |
| pypi tripleo-heat-templates(PyPI) | = 0.5.6 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.6.0 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.6.1 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.6.2 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.6.3 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.6.4 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.0 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.1 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.2 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.3 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.4 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.5 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.6 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.7 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.8 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.7.9 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.0 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.1 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.2 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.3 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.4 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.5 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.6 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.7 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi tripleo-heat-templates(PyPI) | = 0.8.8 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | = 0.8.9 | No fix listed |
| pypi tripleo-heat-templates(PyPI) | < 0.8.9 | 0.8.9 |
| OpenStack tripleo heat templates | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- RHSA-2015:2650 vendor-advisory
- bugs.launchpad.net
- github.com product
- github.com
- opendev.org
- opendev.org
- github.com vendor-advisory