CVE-2015-1842

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.

Score
CVSS 2.0 10.0 Critical
Status
Modified - secalert@redhat.com
Published
2015-04-10
Last modified
2024-08-06
Weaknesses
CWE-255

Affected products

References