A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2018:2214 | Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898 | Issue Tracking Third Party Advisory |
https://access.redhat.com/errata/RHSA-2018:2214 | Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898 | Issue Tracking Third Party Advisory |
Configurations
History
21 Nov 2024, 03:42
Type | Values Removed | Values Added |
---|---|---|
References | () https://access.redhat.com/errata/RHSA-2018:2214 - Third Party Advisory | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898 - Issue Tracking, Third Party Advisory |
Information
Published : 2018-07-30 17:29
Updated : 2024-11-21 03:42
NVD link : CVE-2018-10898
Mitre link : CVE-2018-10898
CVE.ORG link : CVE-2018-10898
JSON object : View
Products Affected
redhat
- openstack
openstack
- tripleo_heat_templates
CWE
CWE-798
Use of Hard-coded Credentials