UBUNTU-CVE-2015-5303
Dashboard / Vulnerabilities / UBUNTU-CVE-2015-5303
Summary:
Details: The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.
References: https://ubuntu.com/security/CVE-2015-5303, https://www.cve.org/CVERecord?id=CVE-2015-5303
Affected packages
Package
Name: tripleo-heat-templates
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
0.6.1-1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
