Description (CNA)
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | unaffected 47e64de0d4025ce95ebbe522aa77223cc319c7b2 before * |
| Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 8 | unaffected 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost before * |
| Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 8 | unaffected 0:16.5.1-17.1.20240913093745.f3599d0.el8ost before * |
| Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 9 | unaffected 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost before * |
| Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 9 | unaffected 0:16.5.1-17.1.20240913100806.f3599d0.el9ost before * |
| Red Hat / Red Hat OpenStack Platform 16.1 | unknown |
| Red Hat / Red Hat OpenStack Platform 16.2 | affected |
CWE
CWE-295
References
- https://access.redhat.com/errata/RHSA-2024:9990
- https://access.redhat.com/errata/RHSA-2024:9991
- https://access.redhat.com/security/cve/CVE-2024-8007
- https://bugzilla.redhat.com/show_bug.cgi?id=2305975
ADP enrichment
No English description supplied.
No references supplied.