OpenStack TripleO Heat templates spoof metadata requests

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-5303 · ADVISORY
• openstack/tripleo-heat-templates commit 1a0c7d9 · WEB
• openstack/tripleo-heat-templates commit 293f19b · WEB
• access.redhat.com/errata/RHSA-2015:2650 · WEB
• bugs.launchpad.net/tripleo/+bug/1516027 · WEB
• openstack/tripleo-heat-templates · PACKAGE
• pypa/advisory-database · WEB
• opendev.org/openstack/tripleo-heat-templates/commit/1a0c7d97165c1b38dc9f78b82ac6ec8519fcf80c · WEB
• opendev.org/openstack/tripleo-heat-templates/commit/293f19b2a41386e1eea47a9e6add24b006c69c42 · WEB
• GitHub Advisory GHSA-m94p-8942-pm49 · ADVISORY

tripleo-heat-templates のその他の脆弱性

• CVE-2021-4180中 4.3An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacke…
• CVE-2018-10898高 8.8A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configurat…
• CVE-2017-12155中 6.3A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world…
• CVE-2015-5271高 7.5The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storag…