Skip to content
fr Sign in
8.1 High

CVE-2024-8007 A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director

Description

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

Affected products and versions

Product Affected versions Fixed in
Red Hat OpenStack Platform 17.1 for RHEL 8 Versions not published
Red Hat OpenStack Platform 17.1 for RHEL 9 Versions not published
Red Hat OpenStack Platform 16.1 Versions not published
Red Hat OpenStack Platform 16.2 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat OpenStack Platform 17.1 for RHEL 8

The 7 CVEs of Red Hat OpenStack Platform 17.1 for RHEL 8 →
CVE-2026-23490 pyasn1 is a generic ASN.1 library for Python 7.5 High CVE-2026-21441 urllib3 is an HTTP client library for Python 8.9 High CVE-2023-6110 A flaw was found in OpenStack 5.5 Medium CVE-2024-1394 Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 7.5 High
Track this CVE