8.1
Élevée
CVE-2024-8007 A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director
Description
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenStack Platform 17.1 for RHEL 8 | Versions non publiées | |
| Red Hat OpenStack Platform 17.1 for RHEL 9 | Versions non publiées | |
| Red Hat OpenStack Platform 16.1 | Versions non publiées | |
| Red Hat OpenStack Platform 16.2 | Versions non publiées |
Références
- RHSA-2024:9990 access.redhat.com
- RHSA-2024:9991 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2305975 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenStack Platform 17.1 for RHEL 8
Les 7 CVE de Red Hat OpenStack Platform 17.1 for RHEL 8 →
CVE-2026-23490
pyasn1 is a generic ASN.1 library for Python
7.5
Élevée
CVE-2026-21441
urllib3 is an HTTP client library for Python
8.9
Élevée
CVE-2023-6110
A flaw was found in OpenStack
5.5
Moyenne
CVE-2024-1394
Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
7.5
Élevée