CVE-2015-5303

Related Files

Red Hat Security Advisory 2015-2650-01

Posted Dec 21, 2015

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-2650-01 - Red Hat Enterprise Linux OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service cloud based on Red Hat Enterprise Linux OpenStack Platform. It was discovered that the director's NeutronMetadataProxySharedSecret parameter remained specified at the default value of 'unset'. This value is used by OpenStack Networking to sign instance headers; if unchanged, an attacker knowing the shared secret could use this flaw to spoof OpenStack Networking metadata requests.

tags | advisory, spoof

systems | linux, redhat

advisories | CVE-2015-5303, CVE-2015-5329

SHA-256 | d0f1e8ff661fe339ce803a3398060afcb6a6a1222c80140dd8a377c45b05ea10

Download | Favorite | View