CVE-2015-1842
Fixed in a distro release EPSS 5%
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.
Products: redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack-installer 5 | augeas | 0:1.0.0-7.el6_6.1 |
| Red Hat openstack-installer 5 | augeas-debuginfo | 0:1.0.0-7.el6_6.1 |
| Red Hat openstack-installer 5 | openstack-foreman-installer | 0:2.0.34-1.el6ost |
| Red Hat openstack-installer 5 | openstack-puppet-modules | 0:2014.1.2-1.el6ost |
| Red Hat openstack-installer 5 | rhel-osp-installer | 1:0.4.7-2.el6ost |
| Red Hat openstack-installer 5 | ruby193-rubygem-staypuft | 0:0.4.15-1.el6ost |
| Red Hat openstack-installer 5 | ruby193-rubygem-staypuft-doc | 0:0.4.15-1.el6ost |
| Red Hat openstack-installer 6 | foreman-discovery-image | 0:7.0-20150227.0.el7ost |
| Red Hat openstack-installer 6 | foreman-proxy | 0:1.6.0.30-6.el7ost |
| Red Hat openstack-installer 6 | openstack-foreman-installer | 0:3.0.22-1.el7ost |
| Red Hat openstack-installer 6 | openstack-puppet-modules | 0:2014.2.13-2.el7ost |
| Red Hat openstack-installer 6 | rhel-osp-installer | 1:0.5.7-1.el7ost |
| Red Hat openstack-installer 6 | rhel-osp-installer-client | 1:0.5.7-1.el7ost |
| Red Hat openstack-installer 6 | ruby193-rubygem-staypuft | 0:0.5.22-1.el7ost |
| Red Hat openstack-installer 6 | ruby193-rubygem-staypuft-doc | 0:0.5.22-1.el7ost |
| Red Hat openstack 5 | openstack-packstack | 0:2014.1.1-0.46.dev1280.el6ost |
| Red Hat openstack 5 | openstack-packstack | 0:2014.1.1-0.46.dev1280.el7ost |
| Red Hat openstack 5 | openstack-packstack-doc | 0:2014.1.1-0.46.dev1280.el6ost |
| Red Hat openstack 5 | openstack-packstack-doc | 0:2014.1.1-0.46.dev1280.el7ost |
| Red Hat openstack 5 | openstack-packstack-puppet | 0:2014.1.1-0.46.dev1280.el6ost |
| Red Hat openstack 5 | openstack-packstack-puppet | 0:2014.1.1-0.46.dev1280.el7ost |
| Red Hat openstack 5 | openstack-puppet-modules | 0:2014.1.2-1.el7ost |
| Red Hat openstack 5 | openstack-puppet-modules | 0:2014.1.2-1.el6ost |
| Red Hat openstack 6 | openstack-packstack | 0:2014.2-0.20.dev1467.g70c9655.el7ost |
| Red Hat openstack 6 | openstack-packstack-doc | 0:2014.2-0.20.dev1467.g70c9655.el7ost |
| Red Hat openstack 6 | openstack-packstack-puppet | 0:2014.2-0.20.dev1467.g70c9655.el7ost |
| Red Hat openstack 6 | openstack-puppet-modules | 0:2014.2.13-2.el7ost |