CVE-2016-4474
Fixed in a distro release EPSS <1%
The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) director (aka overcloud-full) use a default root password of ROOTPW, which allows attackers to gain access via unspecified vectors.
Products: redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack-director 8 | rhosp-director-images | 0:8.0-20160603.2.el7ost |
| Red Hat openstack-director 8 | rhosp-director-images-ipa | 0:8.0-20160603.2.el7ost |