CVE-2015-5329 Hardcoded credentials in n/a
Attackers can access deployed overcloud services by leveraging default RabbitMQ credentials due to improper credential usage in TripleO Heat templates.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-5329?
CVE-2015-5329 is a high-severity vulnerability in Redhat Openstack, published on 11 Apr 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
Weakness: CWE-264
Which versions are affected by CVE-2015-5329?
It affects 1 product.
Products include Redhat Openstack.
How do I fix CVE-2015-5329?
Apply the vendor's patch.
Is CVE-2015-5329 being exploited?
There is no known exploitation of CVE-2015-5329 in the wild and no public exploit code.
Other vulnerabilities in Redhat Openstack
Sources
Also known as GHSA-cqm8-gw87-fxm6.