CVE-2015-5303
Fixed in a distro release EPSS 2%
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.
Products: openstack tripleo_heat_templates
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | tripleo-heat-templates | 0.8.10 |
| PyPI | tripleo-heat-templates | 0.8.9 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack-director 7 | openstack-tripleo-heat-templates | 0:0.8.6-94.el7ost |
| Red Hat openstack-director 7 | python-rdomanager-oscplugin | 0:0.0.10-22.el7ost |
| Ubuntu 16.04 LTS | tripleo-heat-templates | no fix |