CVE-2016-6829 The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowbar Framework has a default password, which...
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| barclamp-trove project barclamp-trove | All versions | No fix listed |
| crowbar-openstack project crowbar-openstack | All versions | No fix listed |
References
- [oss-security] 20160816 CVE Request: Default password in openstack / crowbar trove mailing-list third-party-advisory
- [oss-security] 20160817 Re: CVE Request: Default password in openstack / crowbar trove mailing-list third-party-advisory
- 92476 third-party-advisory vdb-entry
- github.com issue-tracking patch
- github.com issue-tracking patch
- www.suse.com patch vendor-advisory