Vulnerability in Red Hat OpenStack
CVE-2015-5329
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
EPSS: 0.015 (71.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Redhat Openstack — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2015-5329?
- CVE-2015-5329 is a high-severity vulnerability in Red Hat OpenStack, classified under CWE-264. CVSS score: 7.3/10. Published 2016-04-11.
- How severe is CVE-2015-5329?
- High severity. CVSS v3 base score is 7.3 out of 10.
- Is CVE-2015-5329 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.