CVE-2016-7404 Openstack Magnum Unsafe Credential Handling
OpenStack Magnum exposes full API credentials in Heat templates, allowing attackers to perform unauthorized API operations beyond certificate retrieval.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-7404?
CVE-2016-7404 is a critical vulnerability in n/a, published on 21 Jun 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform.
Weakness: CWE-200
Which versions are affected by CVE-2016-7404?
3 open source packages ship an affected version, including openstack-magnum. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
openstack-magnum PyPI | All versions | 5.0.0 |
openstack-magnum PyPI | All versions | 5.0.0 |
openstack-magnum PyPI | All versions | 5.0.0 |
Linux distribution packages (2)
openstack-magnum SUSE:OpenStack Cloud 7 | All versions | 3.1.2~a0~dev20-9.4 |
openstack-magnum-doc SUSE:OpenStack Cloud 7 | All versions | 3.1.2~a0~dev20-9.3 |
Products include Openstack Magnum.
How do I fix CVE-2016-7404?
Upgrade openstack-magnum to 5.0.0 or later.
Is CVE-2016-7404 being exploited?
There is no known exploitation of CVE-2016-7404 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2016-7404, GHSA-793v-r35j-9rp9, PYSEC-2026-437, SUSE-SU-2017:1233-1, UBUNTU-CVE-2016-7404.