CVE-2017-12155 Openstack tripleo-heat-templates unauthenticated file access
A local attacker can read or modify Ceph cluster data by accessing a world-readable keyring file in OpenStack TripleO deployments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-12155?
CVE-2017-12155 is a medium-severity vulnerability in openstack-tripleo-heat-templates, published on 12 Dec 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
Weakness: CWE-306
Which versions are affected by CVE-2017-12155?
3 open source packages ship an affected version, including tripleo-heat-templates. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
tripleo-heat-templates PyPI | All versions | 7.0.6 |
tripleo-heat-templates PyPI | All versions | 7.0.6 |
tripleo-heat-templates PyPI | All versions | 7.0.6 |
Linux distribution packages (1)
openstack-tripleo-heat-templates Red Hat:openstack:12::el7 | All versions | 0:7.0.9-8.el7ost |
Products include Ceph Ceph.
How do I fix CVE-2017-12155?
Upgrade tripleo-heat-templates to 7.0.6 or later.
Is CVE-2017-12155 being exploited?
There is no known exploitation of CVE-2017-12155 in the wild and no public exploit code.
Other vulnerabilities in openstack-tripleo-heat-templates
Sources
Also known as GHSA-w8gx-hhcx-px6w, PYSEC-2026-754, RHSA-2018:0602, UBUNTU-CVE-2017-12155.