Access Control Bypass

puppet-tripleo is is vulnerable to access control bypass. It happens because it does not prevent the creation of TCP/UDP rules with empty port values, allowing the attacker to use these open ports to gain access to unauthorized resources.