CVE-2015-5303 in OpenStack

Riassunto

di MITRE

The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 01/07/2015
• Divulgazione: 11/04/2016
• Moderazione: accettato
• Voce: VDB-82055
• CPE: pronto
• CWE: CWE-254 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.01651
• KEV: no
• Attività: molto basso
• Settore: Chemical, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-5303
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5303
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-5303/