Lucene search

Veracode Vulnerability DatabaseVERACODE:12945

HistoryJan 15, 2019 - 9:23 a.m.

Insecure Default Configuration

2019-01-1509:23:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.001

Percentile

33.3%

JSON

tripleo_heat_templates is vulnerable to insecure default configuration. The vulnerabilty exists due to the default configuration set for the OpenDayLight (ODL) admin users’ credentials, allowing malicious users to gain unauthorized access.

References

access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/

access.redhat.com/errata/RHSA-2018:2214

access.redhat.com/security/updates/classification/#important

bugzilla.redhat.com/show_bug.cgi?id=1559055

bugzilla.redhat.com/show_bug.cgi?id=1559105

bugzilla.redhat.com/show_bug.cgi?id=1586132

bugzilla.redhat.com/show_bug.cgi?id=1586171

bugzilla.redhat.com/show_bug.cgi?id=1589346

bugzilla.redhat.com/show_bug.cgi?id=1592424

bugzilla.redhat.com/show_bug.cgi?id=1592823

bugzilla.redhat.com/show_bug.cgi?id=1593757

bugzilla.redhat.com/show_bug.cgi?id=1594328

bugzilla.redhat.com/show_bug.cgi?id=1594333

bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898

EPSS

0.001

Percentile

33.3%

JSON

Related for VERACODE:12945