TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-5271 · ADVISORY
• access.redhat.com/errata/RHSA-2015:1862 · WEB
• access.redhat.com/security/cve/CVE-2015-5271 · WEB
• bugs.launchpad.net/tripleo/+bug/1494896 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• git.openstack.org/cgit/openstack/tripleo-heat-templates · PACKAGE
• git.openstack.org/cgit/openstack/tripleo-heat-templates/commit · WEB
• pypa/advisory-database · WEB
• launchpadlibrarian.net/217268516/CVE-2015-5271_puppet-swift.patch · WEB
• review.openstack.org/226541 · WEB
• GitHub Advisory GHSA-8936-44gw-7664 · ADVISORY

tripleo-heat-templates のその他の脆弱性

• CVE-2021-4180中 4.3An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacke…
• CVE-2018-10898高 8.8A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configurat…
• CVE-2017-12155中 6.3A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world…
• CVE-2015-5303高 7.5The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack …