CVE-2016-4474 in Red Hat Enterprise Linux OpenStack Platform
Summary
The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) director (aka overcloud-full) use a default root password of ROOTPW, which allows attackers to gain access via unspecified vectors.
Reservation
05/02/2016
Disclosure
06/30/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 88547 | Red Hat Enterprise Linux OpenStack Platform Image Build Processor 7pk security | 254 | Not defined | Workaround | CVE-2016-4474 |