CVE-2018-10898

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

Score

CVSS 3.0 8.8 High

Status

Modified - secalert@redhat.com

Published

2018-07-30

Last modified

2024-08-05

Weaknesses

CWE-798

Affected products

• Tripleo Heat Templates (Openstack)
• Openstack (Redhat)
• Openstack-tripleo-heat-templates (Unknown)

References

• https://access.redhat.com/errata/RHSA-2018:2214
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898