CVE-2018-17954 crowbar provision leaks admin password to all nodes in cleartext
Root users on any managed node can gain root access on other nodes due to cleartext password leakage in the provisioning tool.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-17954?
CVE-2018-17954 is a critical vulnerability in SUSE OpenStack Cloud 7, published on 3 Apr 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.
Weakness: CWE-269
Which versions are affected by CVE-2018-17954?
It affects 2 products.
Products include Suse Openstack Cloud, Suse Openstack Cloud Crowbar.
How do I fix CVE-2018-17954?
Apply the vendor's patch.
Is CVE-2018-17954 being exploited?
There is no known exploitation of CVE-2018-17954 in the wild and no public exploit code.
Sources
Also known as GHSA-m786-w84g-pcv9.