RHEL 7 : Red Hat OpenStack Platform director (RHSA-2018:1627)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1627 advisory. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service Iaa...

CVE-2017-12155

The CVE-2017-12155 issue is a resource-permission flaw in openstack-tripleo-heat-templates (ceph.client.openstack.keyring created world-readable). A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though they were the OpenStack service, poten...