PYSEC-2016-35

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/tripleo-heat-templates/PYSEC-2016-35.yaml
JSON Data
https://api.test.osv.dev/v1/vulns/PYSEC-2016-35
Aliases
Published
2016-04-11T21:59:00Z
Modified
2024-04-30T08:56:20.531944Z
Summary
[none]
Details

The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.

References

Affected packages

PyPI / tripleo-heat-templates

Package

Name
tripleo-heat-templates
View open source insights on deps.dev
Purl
pkg:pypi/tripleo-heat-templates

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.8.9

Affected versions

0.*

0.5.6
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.8.0
0.8.1
0.8.2
0.8.3
0.8.4
0.8.5
0.8.6
0.8.7
0.8.8