high8.8
CVE-2016-4474
The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo…
Impact
The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) director (aka overcloud-full) use a default root password of ROOTPW, which allows attackers to gain access via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Openstack | Versions 7.0, 8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-1222.html
- https://access.redhat.com/security/vulnerabilities/2359821
- https://rhn.redhat.com/errata/RHSA-2016-1223.html
- http://rhn.redhat.com/errata/RHSA-2016-1222.html
- https://access.redhat.com/security/vulnerabilities/2359821
- https://rhn.redhat.com/errata/RHSA-2016-1223.html