Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2017-12155
Vulnerability from cvelistv5
Published
2017-12-12 20:00
Modified
2024-09-16 17:22
Severity ?
EPSS score ?
Summary
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| ▼ | OpenStack | openstack-tripleo-heat-templates |
Version: Newton, Ocata, Pike and possibly older |
|
|
|||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T18:28:16.604Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2018:1593",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"name": "RHSA-2018:1627",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugs.launchpad.net/tripleo/+bug/1720787"
},
{
"name": "RHSA-2018:0602",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "openstack-tripleo-heat-templates",
"vendor": "OpenStack",
"versions": [
{
"status": "affected",
"version": "Newton, Ocata, Pike and possibly older"
}
]
}
],
"datePublic": "2017-09-20T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-05-19T09:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2018:1593",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"name": "RHSA-2018:1627",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugs.launchpad.net/tripleo/+bug/1720787"
},
{
"name": "RHSA-2018:0602",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"DATE_PUBLIC": "2017-09-20T00:00:00",
"ID": "CVE-2017-12155",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "openstack-tripleo-heat-templates",
"version": {
"version_data": [
{
"version_value": "Newton, Ocata, Pike and possibly older"
}
]
}
}
]
},
"vendor_name": "OpenStack"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Incorrect Permission Assignment for Critical Resource"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:1593",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"name": "RHSA-2018:1627",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"name": "https://bugs.launchpad.net/tripleo/+bug/1720787",
"refsource": "CONFIRM",
"url": "https://bugs.launchpad.net/tripleo/+bug/1720787"
},
{
"name": "RHSA-2018:0602",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2017-12155",
"datePublished": "2017-12-12T20:00:00Z",
"dateReserved": "2017-08-01T00:00:00",
"dateUpdated": "2024-09-16T17:22:48.181Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2017-12155\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2017-12-12T20:29:00.227\",\"lastModified\":\"2024-11-21T03:08:56.793\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.\"},{\"lang\":\"es\",\"value\":\"Se detect\u00f3 una vulnerabilidad de permisos de recursos en el paquete openstack-tripleo-heat-templates donde se crea ceph.client.openstack.keyring con el permiso world-readable. Un atacante local con acceso a la clave podr\u00eda leer o modificar datos en los pools de memoria del cl\u00faster de Cepth para OpenStack como si el atacante fuera el servicio OpenStack, pudiendo leer o modificar datos en un volumen de OpenStack Block Storage.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":6.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.0,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:M/Au:N/C:P/I:P/A:N\",\"baseScore\":3.3,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.4,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ceph:ceph:-:*:*:*:*:openstack:*:*\",\"matchCriteriaId\":\"5CF5A09E-C354-401D-8415-B6BA994C857E\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2018:0602\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1593\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1627\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugs.launchpad.net/tripleo/+bug/1720787\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1489360\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Mitigation\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:0602\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1593\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:1627\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugs.launchpad.net/tripleo/+bug/1720787\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1489360\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mitigation\"]}]}}"
}
}
rhsa-2018_1627
Vulnerability from csaf_redhat
Published
2018-05-18 17:03
Modified
2024-11-14 23:42
Summary
Red Hat Security Advisory: Red Hat OpenStack Platform director security update
Notes
Topic
An update is now available for Red Hat OpenStack Platform 11.0 (Ocata).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenStack Platform director provides the facilities for deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
based on Red Hat OpenStack Platform.
Security Fix(es):
* A resource-permission flaw was found in the python-tripleo and openstack-tripleo-heat-templates packages where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
To exploit this flaw, the attacker must have local access to an overcloud node. However by default, access to overcloud nodes is restricted and accessible only from the management undercloud server on an internal network. (CVE-2017-12155)
This issue was discovered by Katuya Kawakami (NEC).
* It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of service (DDoS) attacks. A remote attacker could send a malicious UDP request using a spoofed source IP address of a target system to memcached, causing it to send a significantly larger response to the target. (CVE-2018-1000115)
This update also includes the following bug fixes and enhancements:
* Prior to this update, when removing the ceph-osd RPM from overcloud nodes that do not require the package, the corresponding Ceph OSD product key was not removed. Consequently, the subscription-manager would incorrectly report that the Ceph OSD product was still installed.
With this update, the script that handles removal of the ceph-osd RPM now also removes the Ceph OSD product key. Note: The script that removes the RPM and product key executes only during the overcloud update procedure; the product key is removed only when the overcloud node is updated.
As a result, after removing the ceph-osd RPM, the subscription-manager no longer reports the Ceph OSD product is installed. (BZ#1571436)
* Previously, there were errors in the director Heat template that configures the VMAX Cinder backend driver. Consequently, the VMAX driver would not function correctly. With this update, the errors have been corrected, and the VMAX driver functions correctly. (BZ#1546799)
* This enhancement adds director support for deploying the Dell EMC VMAX cinder backend. (BZ#1546793)
* In this enhancement, if a minor update is blocked by an existing yum process that prevents the package update, the process should exit with an appropriate error message. This was added because the minor update may appear to freeze, due to yum waiting for the existing yum.pid to exit; when it eventually fails it is not immediately clear why. As a result, if there is an existing yum process preventing the package update, then the minor update fails with a clear message to indicate this: "ERROR existing yum.pid detected - can't continue! Please ensure there is no other package update process for the duration of the minor update worfklow. Exiting". (BZ#1471721)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenStack Platform 11.0 (Ocata).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform director provides the facilities for deploying\nand monitoring a private or public infrastructure-as-a-service (IaaS) cloud\nbased on Red Hat OpenStack Platform.\n\nSecurity Fix(es):\n\n* A resource-permission flaw was found in the python-tripleo and openstack-tripleo-heat-templates packages where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. \n\nTo exploit this flaw, the attacker must have local access to an overcloud node. However by default, access to overcloud nodes is restricted and accessible only from the management undercloud server on an internal network. (CVE-2017-12155)\n\nThis issue was discovered by Katuya Kawakami (NEC).\n\n* It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of service (DDoS) attacks. A remote attacker could send a malicious UDP request using a spoofed source IP address of a target system to memcached, causing it to send a significantly larger response to the target. (CVE-2018-1000115)\n\nThis update also includes the following bug fixes and enhancements:\n\n* Prior to this update, when removing the ceph-osd RPM from overcloud nodes that do not require the package, the corresponding Ceph OSD product key was not removed. Consequently, the subscription-manager would incorrectly report that the Ceph OSD product was still installed.\nWith this update, the script that handles removal of the ceph-osd RPM now also removes the Ceph OSD product key. Note: The script that removes the RPM and product key executes only during the overcloud update procedure; the product key is removed only when the overcloud node is updated.\nAs a result, after removing the ceph-osd RPM, the subscription-manager no longer reports the Ceph OSD product is installed. (BZ#1571436)\n\n* Previously, there were errors in the director Heat template that configures the VMAX Cinder backend driver. Consequently, the VMAX driver would not function correctly. With this update, the errors have been corrected, and the VMAX driver functions correctly. (BZ#1546799)\n\n* This enhancement adds director support for deploying the Dell EMC VMAX cinder backend. (BZ#1546793)\n\n* In this enhancement, if a minor update is blocked by an existing yum process that prevents the package update, the process should exit with an appropriate error message. This was added because the minor update may appear to freeze, due to yum waiting for the existing yum.pid to exit; when it eventually fails it is not immediately clear why. As a result, if there is an existing yum process preventing the package update, then the minor update fails with a clear message to indicate this: \"ERROR existing yum.pid detected - can\u0027t continue! Please ensure there is no other package update process for the duration of the minor update worfklow. Exiting\". (BZ#1471721)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1627",
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1445766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445766"
},
{
"category": "external",
"summary": "1471721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471721"
},
{
"category": "external",
"summary": "1478274",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1478274"
},
{
"category": "external",
"summary": "1489360",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"category": "external",
"summary": "1518009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1518009"
},
{
"category": "external",
"summary": "1524422",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1524422"
},
{
"category": "external",
"summary": "1546799",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1546799"
},
{
"category": "external",
"summary": "1547089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547089"
},
{
"category": "external",
"summary": "1547956",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547956"
},
{
"category": "external",
"summary": "1548345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548345"
},
{
"category": "external",
"summary": "1550167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550167"
},
{
"category": "external",
"summary": "1551182",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551182"
},
{
"category": "external",
"summary": "1552245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552245"
},
{
"category": "external",
"summary": "1567349",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567349"
},
{
"category": "external",
"summary": "1567365",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1567365"
},
{
"category": "external",
"summary": "1571436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1571436"
},
{
"category": "external",
"summary": "1577957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1577957"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1627.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform director security update",
"tracking": {
"current_release_date": "2024-11-14T23:42:56+00:00",
"generator": {
"date": "2024-11-14T23:42:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1627",
"initial_release_date": "2018-05-18T17:03:23+00:00",
"revision_history": [
{
"date": "2018-05-18T17:03:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-18T17:03:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:42:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 11.0",
"product": {
"name": "Red Hat OpenStack Platform 11.0",
"product_id": "7Server-RH7-RHOS-11.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:11::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"product": {
"name": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"product_id": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@6.2.12-2.el7ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-tripleo-0:6.5.10-3.el7ost.src",
"product": {
"name": "puppet-tripleo-0:6.5.10-3.el7ost.src",
"product_id": "puppet-tripleo-0:6.5.10-3.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tripleo@6.5.10-3.el7ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"product": {
"name": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"product_id": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@6.2.12-2.el7ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"product": {
"name": "puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"product_id": "puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tripleo@6.5.10-3.el7ost?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch as a component of Red Hat OpenStack Platform 11.0",
"product_id": "7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch"
},
"product_reference": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-11.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src as a component of Red Hat OpenStack Platform 11.0",
"product_id": "7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src"
},
"product_reference": "openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-11.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tripleo-0:6.5.10-3.el7ost.noarch as a component of Red Hat OpenStack Platform 11.0",
"product_id": "7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch"
},
"product_reference": "puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-11.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tripleo-0:6.5.10-3.el7ost.src as a component of Red Hat OpenStack Platform 11.0",
"product_id": "7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
},
"product_reference": "puppet-tripleo-0:6.5.10-3.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-11.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Katuya Kawakami"
],
"organization": "NEC"
}
],
"cve": "CVE-2017-12155",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2017-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1489360"
}
],
"notes": [
{
"category": "description",
"text": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. \r\nTo exploit this flaw, the attacker must have local access to an overcloud node. However by default, access to overcloud nodes is restricted and accessible only from the management undercloud server on an internal network. Follow good security principles in your networking environment to ensure that network access is properly controlled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-12155"
},
{
"category": "external",
"summary": "RHBZ#1489360",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-12155",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12155"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12155",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12155"
}
],
"release_date": "2017-09-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-18T17:03:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"category": "workaround",
"details": "To mitigate the flaw, use an overcloud post-deploy script[1] to do the following on all overcloud nodes:\n\nkey=/etc/ceph/ceph.client.openstack.keyring\nchown root:root $key\nchmod 600 $key\nsetfacl -m u:glance:r $key \nsetfacl -m u:cinder:r $key\nsetfacl -m u:nova:r $key\nsetfacl -m u: gnocchi:r $key\n\nIf not using Red Hat OpenStack Platform director, then run the commands above manually on each overcloud node, \nWarning: Only running \u0027chmod 600 $key\u0027 alone (without an ACL) will prevent OpenStack from reading the key.\n\n[1] https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/11/html-single/advanced_overcloud_customization/#sect-Customizing_Overcloud_PostConfiguration_All",
"product_ids": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director"
},
{
"cve": "CVE-2018-1000115",
"discovery_date": "2018-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1551182"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of service (DDoS) attacks. A remote attacker could send a malicious UDP request using a spoofed source IP address of a target system to memcached, causing it to send a significantly larger response to the target.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "memcached: UDP server support allows spoofed traffic amplification DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of traffic amplification distributed denial of service (DDoS) attacks that take advantage of the insecurely configured memcached servers reachable from the public Internet. The default configuration of memcached as shipped in Red Hat products makes it possible to abuse them for these DDoS attacks if memcached is exposed to connections from the public Internet. Refer to the Red Hat Knowledgebase article 3369081 for instructions on how to properly secure memcached installations to prevent them from being used in the attack.\n\nhttps://access.redhat.com/solutions/3369081",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1000115"
},
{
"category": "external",
"summary": "RHBZ#1551182",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551182"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000115",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000115"
}
],
"release_date": "2018-03-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-18T17:03:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"category": "workaround",
"details": "Please refer to the Red Hat Knowledgebase article 3369081 for instructions on how to properly secure memcached installations to prevent them from being used in an attack.\n\nhttps://access.redhat.com/solutions/3369081",
"product_ids": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.noarch",
"7Server-RH7-RHOS-11.0:openstack-tripleo-heat-templates-0:6.2.12-2.el7ost.src",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.noarch",
"7Server-RH7-RHOS-11.0:puppet-tripleo-0:6.5.10-3.el7ost.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "memcached: UDP server support allows spoofed traffic amplification DoS"
}
]
}
rhsa-2018_0602
Vulnerability from csaf_redhat
Published
2018-03-28 17:11
Modified
2024-11-14 21:48
Summary
Red Hat Security Advisory: openstack-tripleo-common and openstack-tripleo-heat-templates update
Notes
Topic
An update for openstack-tripleo-common and openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 12.0 (Pike).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
openstack-tripleo-common contains the python library for code common to the Red Hat OpenStack Platform director CLI and GUI (codename tripleo).
openstack-tripleo-heat-templates is a collection of OpenStack Orchestration templates and tools (codename heat), which can be used to help deploy OpenStack.
Security Fix(es):
* openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director (CVE-2017-12155)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank Katuya Kawakami (NEC) for reporting this issue.
Bug Fix(es):
* All Compute and Controller nodes have bridge-mappings configured and therefore are eligible to schedule routers. However, if you scheduled a router on a Compute node that doesn't have a connection to an external network, connectivity with the external network fails. This fix adds the ability to configure bridge-mappings in TripleO and in the director according to roles so that you can now exclude Compute nodes from router scheduling and maintain external network connectivity. (BZ#1510879)
* Previously, the CephPools parameter value was incorrectly consumed as a string list instead of as a JSON object. This prevented creating additional Ceph pools during the overcloud deployment, because attempting to pass a JSON object failed. This fix updates the CephPools parameter so that it now accepts any JSON object that describes additional pools to create in the Ceph cluster. Note: The JSON object structure must conform to ceph-ansible conventions. (BZ#1516389)
* There is currently a known issue with LDAP integration for Red Hat OpenStack Platform. The `keystone_domain_confg` tag is missing currently from `keystone.yaml`, preventing Puppet from properly applying the required configuration files. Consequently, LDAP integration with Red Hat OpenStack Platform will not be properly configured. As a workaround, you must manually edit `keystone.yaml` and add the missing tag. There are two ways to do this:
1. Edit the file directly:
a. Log into the undercloud as the stack user.
b. Open the keystone.yaml in the editor of your choice. For example:
`sudo vi /usr/share/openstack-tripleo-heat-templates/docker/services/keystone.yaml`
c. Append the missing puppet tag, `keystone_domain_confg`, to line 94. For example:
`puppet_tags: keystone_config`
Changes to:
`puppet_tags: keystone_config,keystone_domain_confg`
d. Save and close `keystone.yaml`.
e. Verify you see the missing tag in the `keystone.yaml` file. The following command should return '1':
`cat /usr/share/openstack-tripleo-heat-templates/docker/sercies/keystone.yaml | grep 'puppet_tags: keystone_config,keystone_domain_config' | wc -l`
2. Or, use sed to edit the file inline:
a. Login to the undercloud as the stack user.
b. Run the following command to add the missing puppet tag:
`sed -i 's/puppet_tags\: keystone_config/puppet_tags\: keystone_config,keystone_domain_config/' /usr/share/openstack-tripleo-heat-templates/docker/services/keystone.yaml`
c. Verify you see the missing tag in the keystone.yaml file The following command should return '1':
`cat /usr/share/openstack-tripleo-heat-templates/docker/sercies/keystone.yaml | grep 'puppet_tags: keystone_config,keystone_domain_config' | wc -l` (BZ#1519057)
* It is only possible to deploy Ceph storage servers if their disk devices are homogeneous. (BZ#1520004)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openstack-tripleo-common and openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 12.0 (Pike).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "openstack-tripleo-common contains the python library for code common to the Red Hat OpenStack Platform director CLI and GUI (codename tripleo).\n\nopenstack-tripleo-heat-templates is a collection of OpenStack Orchestration templates and tools (codename heat), which can be used to help deploy OpenStack.\n\nSecurity Fix(es):\n\n* openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director (CVE-2017-12155)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank Katuya Kawakami (NEC) for reporting this issue.\n\nBug Fix(es):\n\n* All Compute and Controller nodes have bridge-mappings configured and therefore are eligible to schedule routers. However, if you scheduled a router on a Compute node that doesn\u0027t have a connection to an external network, connectivity with the external network fails. This fix adds the ability to configure bridge-mappings in TripleO and in the director according to roles so that you can now exclude Compute nodes from router scheduling and maintain external network connectivity. (BZ#1510879)\n\n* Previously, the CephPools parameter value was incorrectly consumed as a string list instead of as a JSON object. This prevented creating additional Ceph pools during the overcloud deployment, because attempting to pass a JSON object failed. This fix updates the CephPools parameter so that it now accepts any JSON object that describes additional pools to create in the Ceph cluster. Note: The JSON object structure must conform to ceph-ansible conventions. (BZ#1516389)\n\n* There is currently a known issue with LDAP integration for Red Hat OpenStack Platform. The `keystone_domain_confg` tag is missing currently from `keystone.yaml`, preventing Puppet from properly applying the required configuration files. Consequently, LDAP integration with Red Hat OpenStack Platform will not be properly configured. As a workaround, you must manually edit `keystone.yaml` and add the missing tag. There are two ways to do this:\n\n1. Edit the file directly:\n a. Log into the undercloud as the stack user.\n b. Open the keystone.yaml in the editor of your choice. For example:\n `sudo vi /usr/share/openstack-tripleo-heat-templates/docker/services/keystone.yaml`\n c. Append the missing puppet tag, `keystone_domain_confg`, to line 94. For example:\n `puppet_tags: keystone_config`\n Changes to:\n `puppet_tags: keystone_config,keystone_domain_confg`\n d. Save and close `keystone.yaml`.\n e. Verify you see the missing tag in the `keystone.yaml` file. The following command should return \u00271\u0027:\n `cat /usr/share/openstack-tripleo-heat-templates/docker/sercies/keystone.yaml | grep \u0027puppet_tags: keystone_config,keystone_domain_config\u0027 | wc -l`\n\n2. Or, use sed to edit the file inline:\n a. Login to the undercloud as the stack user.\n b. Run the following command to add the missing puppet tag:\n `sed -i \u0027s/puppet_tags\\: keystone_config/puppet_tags\\: keystone_config,keystone_domain_config/\u0027 /usr/share/openstack-tripleo-heat-templates/docker/services/keystone.yaml`\n c. Verify you see the missing tag in the keystone.yaml file The following command should return \u00271\u0027:\n `cat /usr/share/openstack-tripleo-heat-templates/docker/sercies/keystone.yaml | grep \u0027puppet_tags: keystone_config,keystone_domain_config\u0027 | wc -l` (BZ#1519057)\n\n* It is only possible to deploy Ceph storage servers if their disk devices are homogeneous. (BZ#1520004)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:0602",
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1301534",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301534"
},
{
"category": "external",
"summary": "1433534",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433534"
},
{
"category": "external",
"summary": "1489360",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"category": "external",
"summary": "1507888",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1507888"
},
{
"category": "external",
"summary": "1508601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1508601"
},
{
"category": "external",
"summary": "1519765",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1519765"
},
{
"category": "external",
"summary": "1523272",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523272"
},
{
"category": "external",
"summary": "1523707",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523707"
},
{
"category": "external",
"summary": "1528755",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528755"
},
{
"category": "external",
"summary": "1533097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533097"
},
{
"category": "external",
"summary": "1533468",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533468"
},
{
"category": "external",
"summary": "1533875",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533875"
},
{
"category": "external",
"summary": "1537725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1537725"
},
{
"category": "external",
"summary": "1538828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1538828"
},
{
"category": "external",
"summary": "1538875",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1538875"
},
{
"category": "external",
"summary": "1539090",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1539090"
},
{
"category": "external",
"summary": "1542537",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1542537"
},
{
"category": "external",
"summary": "1543641",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1543641"
},
{
"category": "external",
"summary": "1546234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1546234"
},
{
"category": "external",
"summary": "1546807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1546807"
},
{
"category": "external",
"summary": "1547955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547955"
},
{
"category": "external",
"summary": "1551137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551137"
},
{
"category": "external",
"summary": "1551461",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551461"
},
{
"category": "external",
"summary": "1552466",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552466"
},
{
"category": "external",
"summary": "1558639",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1558639"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0602.json"
}
],
"title": "Red Hat Security Advisory: openstack-tripleo-common and openstack-tripleo-heat-templates update",
"tracking": {
"current_release_date": "2024-11-14T21:48:56+00:00",
"generator": {
"date": "2024-11-14T21:48:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:0602",
"initial_release_date": "2018-03-28T17:11:50+00:00",
"revision_history": [
{
"date": "2018-03-28T17:11:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-03-28T17:11:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:48:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 12.0",
"product": {
"name": "Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:12::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src",
"product": {
"name": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src",
"product_id": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@7.0.9-8.el7ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"product": {
"name": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"product_id": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@7.0.9-8.el7ost?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch"
},
"product_reference": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src as a component of Red Hat OpenStack Platform 12.0",
"product_id": "7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src"
},
"product_reference": "openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-12.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Katuya Kawakami"
],
"organization": "NEC"
}
],
"cve": "CVE-2017-12155",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2017-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1489360"
}
],
"notes": [
{
"category": "description",
"text": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. \r\nTo exploit this flaw, the attacker must have local access to an overcloud node. However by default, access to overcloud nodes is restricted and accessible only from the management undercloud server on an internal network. Follow good security principles in your networking environment to ensure that network access is properly controlled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-12155"
},
{
"category": "external",
"summary": "RHBZ#1489360",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-12155",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12155"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12155",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12155"
}
],
"release_date": "2017-09-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-03-28T17:11:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
},
{
"category": "workaround",
"details": "To mitigate the flaw, use an overcloud post-deploy script[1] to do the following on all overcloud nodes:\n\nkey=/etc/ceph/ceph.client.openstack.keyring\nchown root:root $key\nchmod 600 $key\nsetfacl -m u:glance:r $key \nsetfacl -m u:cinder:r $key\nsetfacl -m u:nova:r $key\nsetfacl -m u: gnocchi:r $key\n\nIf not using Red Hat OpenStack Platform director, then run the commands above manually on each overcloud node, \nWarning: Only running \u0027chmod 600 $key\u0027 alone (without an ACL) will prevent OpenStack from reading the key.\n\n[1] https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/11/html-single/advanced_overcloud_customization/#sect-Customizing_Overcloud_PostConfiguration_All",
"product_ids": [
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.noarch",
"7Server-RH7-RHOS-12.0:openstack-tripleo-heat-templates-0:7.0.9-8.el7ost.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director"
}
]
}
rhsa-2018_1593
Vulnerability from csaf_redhat
Published
2018-05-17 15:40
Modified
2024-11-14 23:42
Summary
Red Hat Security Advisory: Red Hat OpenStack Platform director security update
Notes
Topic
An update is now available for Red Hat OpenStack Platform 10.0 (Newton).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud based on Red Hat OpenStack Platform.
Security Fix(es):
* A resource-permission flaw was found in the python-tripleo and openstack-tripleo-heat-templates packages where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
To exploit this flaw, the attacker must have local access to an overcloud node. However by default, access to overcloud nodes is restricted and accessible only from the management undercloud server on an internal network. (CVE-2017-12155)
This issue was discovered by Katuya Kawakami (NEC).
* It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of service (DDoS) attacks. A remote attacker could send a malicious UDP request using a spoofed source IP address of a target system to memcached, causing it to send a significantly larger response to the target. (CVE-2018-1000115)
This advisory also addresses the following issues:
* This release adds support for deploying Dell EMC VMAX Block Storage backend using the Red Hat OpenStack Platform director. (BZ#1503896)
* Using composable roles for deploying Dell SC and PS Block Storage backend caused errors. The backends could only be deploying using 'cinder::config::cinder_config' hiera data.
With this update, the composable role support for deploying the Dell SC and PS Block Storage backends is updated. As a result, they can be now deployed using composable roles. (BZ#1552980)
* Previously, the iptables rules were managed by the Red Hat OpenStack Platform director and the OpenStack Networking service, which resulted in the rules created by the OpenStack Networking service to persist on to the disk. As a result, the rules that should not be loaded after an iptables restart or a system reboot would be loaded causing traffic issues.
With this update, the Red Hat OpenStack Platform director has been updated to exclude the OpenStack Networking rules from '/etc/sysconfig/iptables' when the director saves the firewall rules. As a result, iptables restart or a system reboot should work without causing traffic problems.
Note: It might be necessary to perform a rolling restart of the controller nodes to ensure that any orphaned managed neutron rules are no longer reloaded. (BZ#1541528)
* OS::TripleO::SwiftStorage::Ports* resources have been renamed to OS::TripleO::ObjectStorage::Port* to ensure standalone Object Storage nodes using the 'ObjectStorage' roles can be deployed correctly. Operators need to modify their custom templates that previously used OS::TripleO::SwiftStorage::Ports* settings. (BZ#1544802)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenStack Platform 10.0 (Newton).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud based on Red Hat OpenStack Platform.\n\nSecurity Fix(es):\n\n* A resource-permission flaw was found in the python-tripleo and openstack-tripleo-heat-templates packages where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. \n\nTo exploit this flaw, the attacker must have local access to an overcloud node. However by default, access to overcloud nodes is restricted and accessible only from the management undercloud server on an internal network. (CVE-2017-12155)\n\nThis issue was discovered by Katuya Kawakami (NEC).\n\n* It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of service (DDoS) attacks. A remote attacker could send a malicious UDP request using a spoofed source IP address of a target system to memcached, causing it to send a significantly larger response to the target. (CVE-2018-1000115)\n\nThis advisory also addresses the following issues:\n\n* This release adds support for deploying Dell EMC VMAX Block Storage backend using the Red Hat OpenStack Platform director. (BZ#1503896)\n\n* Using composable roles for deploying Dell SC and PS Block Storage backend caused errors. The backends could only be deploying using \u0027cinder::config::cinder_config\u0027 hiera data.\nWith this update, the composable role support for deploying the Dell SC and PS Block Storage backends is updated. As a result, they can be now deployed using composable roles. (BZ#1552980)\n\n* Previously, the iptables rules were managed by the Red Hat OpenStack Platform director and the OpenStack Networking service, which resulted in the rules created by the OpenStack Networking service to persist on to the disk. As a result, the rules that should not be loaded after an iptables restart or a system reboot would be loaded causing traffic issues. \nWith this update, the Red Hat OpenStack Platform director has been updated to exclude the OpenStack Networking rules from \u0027/etc/sysconfig/iptables\u0027 when the director saves the firewall rules. As a result, iptables restart or a system reboot should work without causing traffic problems. \nNote: It might be necessary to perform a rolling restart of the controller nodes to ensure that any orphaned managed neutron rules are no longer reloaded. (BZ#1541528)\n\n* OS::TripleO::SwiftStorage::Ports* resources have been renamed to OS::TripleO::ObjectStorage::Port* to ensure standalone Object Storage nodes using the \u0027ObjectStorage\u0027 roles can be deployed correctly. Operators need to modify their custom templates that previously used OS::TripleO::SwiftStorage::Ports* settings. (BZ#1544802)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:1593",
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1414549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414549"
},
{
"category": "external",
"summary": "1489360",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"category": "external",
"summary": "1503896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1503896"
},
{
"category": "external",
"summary": "1514532",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1514532"
},
{
"category": "external",
"summary": "1514842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1514842"
},
{
"category": "external",
"summary": "1517302",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1517302"
},
{
"category": "external",
"summary": "1533602",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1533602"
},
{
"category": "external",
"summary": "1534540",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1534540"
},
{
"category": "external",
"summary": "1538753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1538753"
},
{
"category": "external",
"summary": "1541528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1541528"
},
{
"category": "external",
"summary": "1543883",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1543883"
},
{
"category": "external",
"summary": "1544211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544211"
},
{
"category": "external",
"summary": "1544802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1544802"
},
{
"category": "external",
"summary": "1545666",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1545666"
},
{
"category": "external",
"summary": "1547091",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547091"
},
{
"category": "external",
"summary": "1547957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1547957"
},
{
"category": "external",
"summary": "1551182",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551182"
},
{
"category": "external",
"summary": "1552980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1552980"
},
{
"category": "external",
"summary": "1559093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1559093"
},
{
"category": "external",
"summary": "1568596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568596"
},
{
"category": "external",
"summary": "1568601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568601"
},
{
"category": "external",
"summary": "1571840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1571840"
},
{
"category": "external",
"summary": "1576577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1576577"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1593.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform director security update",
"tracking": {
"current_release_date": "2024-11-14T23:42:51+00:00",
"generator": {
"date": "2024-11-14T23:42:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:1593",
"initial_release_date": "2018-05-17T15:40:55+00:00",
"revision_history": [
{
"date": "2018-05-17T15:40:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-05-17T15:40:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T23:42:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 10.0",
"product": {
"name": "Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:10::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"product": {
"name": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"product_id": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@5.3.10-1.el7ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-tripleo-0:5.6.8-6.el7ost.src",
"product": {
"name": "puppet-tripleo-0:5.6.8-6.el7ost.src",
"product_id": "puppet-tripleo-0:5.6.8-6.el7ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tripleo@5.6.8-6.el7ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"product": {
"name": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"product_id": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@5.3.10-1.el7ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"product": {
"name": "puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"product_id": "puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tripleo@5.6.8-6.el7ost?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch"
},
"product_reference": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src"
},
"product_reference": "openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tripleo-0:5.6.8-6.el7ost.noarch as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch"
},
"product_reference": "puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tripleo-0:5.6.8-6.el7ost.src as a component of Red Hat OpenStack Platform 10.0",
"product_id": "7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
},
"product_reference": "puppet-tripleo-0:5.6.8-6.el7ost.src",
"relates_to_product_reference": "7Server-RH7-RHOS-10.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Katuya Kawakami"
],
"organization": "NEC"
}
],
"cve": "CVE-2017-12155",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2017-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1489360"
}
],
"notes": [
{
"category": "description",
"text": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. \r\nTo exploit this flaw, the attacker must have local access to an overcloud node. However by default, access to overcloud nodes is restricted and accessible only from the management undercloud server on an internal network. Follow good security principles in your networking environment to ensure that network access is properly controlled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-12155"
},
{
"category": "external",
"summary": "RHBZ#1489360",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-12155",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12155"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-12155",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12155"
}
],
"release_date": "2017-09-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-17T15:40:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"category": "workaround",
"details": "To mitigate the flaw, use an overcloud post-deploy script[1] to do the following on all overcloud nodes:\n\nkey=/etc/ceph/ceph.client.openstack.keyring\nchown root:root $key\nchmod 600 $key\nsetfacl -m u:glance:r $key \nsetfacl -m u:cinder:r $key\nsetfacl -m u:nova:r $key\nsetfacl -m u: gnocchi:r $key\n\nIf not using Red Hat OpenStack Platform director, then run the commands above manually on each overcloud node, \nWarning: Only running \u0027chmod 600 $key\u0027 alone (without an ACL) will prevent OpenStack from reading the key.\n\n[1] https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/11/html-single/advanced_overcloud_customization/#sect-Customizing_Overcloud_PostConfiguration_All",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director"
},
{
"cve": "CVE-2018-1000115",
"discovery_date": "2018-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1551182"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of service (DDoS) attacks. A remote attacker could send a malicious UDP request using a spoofed source IP address of a target system to memcached, causing it to send a significantly larger response to the target.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "memcached: UDP server support allows spoofed traffic amplification DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of traffic amplification distributed denial of service (DDoS) attacks that take advantage of the insecurely configured memcached servers reachable from the public Internet. The default configuration of memcached as shipped in Red Hat products makes it possible to abuse them for these DDoS attacks if memcached is exposed to connections from the public Internet. Refer to the Red Hat Knowledgebase article 3369081 for instructions on how to properly secure memcached installations to prevent them from being used in the attack.\n\nhttps://access.redhat.com/solutions/3369081",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1000115"
},
{
"category": "external",
"summary": "RHBZ#1551182",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1551182"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000115",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000115"
}
],
"release_date": "2018-03-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-05-17T15:40:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"category": "workaround",
"details": "Please refer to the Red Hat Knowledgebase article 3369081 for instructions on how to properly secure memcached installations to prevent them from being used in an attack.\n\nhttps://access.redhat.com/solutions/3369081",
"product_ids": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.noarch",
"7Server-RH7-RHOS-10.0:openstack-tripleo-heat-templates-0:5.3.10-1.el7ost.src",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.noarch",
"7Server-RH7-RHOS-10.0:puppet-tripleo-0:5.6.8-6.el7ost.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "memcached: UDP server support allows spoofed traffic amplification DoS"
}
]
}
ghsa-w8gx-hhcx-px6w
Vulnerability from github
Published
2022-05-13 01:42
Modified
2023-10-10 15:43
Severity ?
Summary
Openstack tripleo-heat-templates unauthenticated file access
Details
A resource-permission flaw was found in the tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. This has been patched in versions 7.0.6 and 8.0.0.
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "tripleo-heat-templates"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.6"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2017-12155"
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"github_reviewed": true,
"github_reviewed_at": "2023-07-26T19:02:59Z",
"nvd_published_at": "2017-12-12T20:29:00Z",
"severity": "MODERATE"
},
"details": "A resource-permission flaw was found in the `tripleo-heat-templates` package where `ceph.client.openstack.keyring` is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. This has been patched in versions [7.0.6](https://github.com/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4) and [8.0.0](https://github.com/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30).",
"id": "GHSA-w8gx-hhcx-px6w",
"modified": "2023-10-10T15:43:09Z",
"published": "2022-05-13T01:42:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-12155"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"type": "WEB",
"url": "https://bugs.launchpad.net/tripleo/+bug/1720787"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"type": "PACKAGE",
"url": "https://github.com/openstack/tripleo-heat-templates"
},
{
"type": "WEB",
"url": "https://opendev.org/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4"
},
{
"type": "WEB",
"url": "https://opendev.org/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
],
"summary": "Openstack tripleo-heat-templates unauthenticated file access"
}
gsd-2017-12155
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2017-12155",
"description": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.",
"id": "GSD-2017-12155",
"references": [
"https://access.redhat.com/errata/RHSA-2018:1627",
"https://access.redhat.com/errata/RHSA-2018:1593",
"https://access.redhat.com/errata/RHSA-2018:0602"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2017-12155"
],
"details": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.",
"id": "GSD-2017-12155",
"modified": "2023-12-13T01:21:03.773211Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"DATE_PUBLIC": "2017-09-20T00:00:00",
"ID": "CVE-2017-12155",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "openstack-tripleo-heat-templates",
"version": {
"version_data": [
{
"version_value": "Newton, Ocata, Pike and possibly older"
}
]
}
}
]
},
"vendor_name": "OpenStack"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Incorrect Permission Assignment for Critical Resource"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:1593",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
},
{
"name": "RHSA-2018:1627",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"name": "https://bugs.launchpad.net/tripleo/+bug/1720787",
"refsource": "CONFIRM",
"url": "https://bugs.launchpad.net/tripleo/+bug/1720787"
},
{
"name": "RHSA-2018:0602",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "\u003c=7.4.7",
"affected_versions": "All versions up to 7.4.7",
"cvss_v2": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"cvss_v3": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"cwe_ids": [
"CWE-1035",
"CWE-306",
"CWE-937"
],
"date": "2023-07-26",
"description": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.",
"fixed_versions": [],
"identifier": "CVE-2017-12155",
"identifiers": [
"GHSA-w8gx-hhcx-px6w",
"CVE-2017-12155"
],
"not_impacted": "",
"package_slug": "pypi/tripleo-heat-templates",
"pubdate": "2022-05-13",
"solution": "Unfortunately, there is no solution available yet.",
"title": "Missing Authentication for Critical Function",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2017-12155",
"https://access.redhat.com/errata/RHSA-2018:0602",
"https://access.redhat.com/errata/RHSA-2018:1593",
"https://access.redhat.com/errata/RHSA-2018:1627",
"https://bugs.launchpad.net/tripleo/+bug/1720787",
"https://bugzilla.redhat.com/show_bug.cgi?id=1489360",
"https://github.com/advisories/GHSA-w8gx-hhcx-px6w"
],
"uuid": "2e25d84d-d2a6-4662-b3e9-4ff1b09f36c3"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:ceph:ceph:-:*:*:*:*:openstack:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2017-12155"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Mitigation"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1489360"
},
{
"name": "https://bugs.launchpad.net/tripleo/+bug/1720787",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Patch"
],
"url": "https://bugs.launchpad.net/tripleo/+bug/1720787"
},
{
"name": "RHSA-2018:0602",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2018:0602"
},
{
"name": "RHSA-2018:1627",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2018:1627"
},
{
"name": "RHSA-2018:1593",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2018:1593"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.4,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"exploitabilityScore": 1.0,
"impactScore": 5.2
}
},
"lastModifiedDate": "2019-10-03T00:03Z",
"publishedDate": "2017-12-12T20:29Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.