NVD

Id
20110  
Name
CVE-2016-4474  
Description
The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) director (aka overcloud-full) use a default root password of ROOTPW, which allows attackers to gain access via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-06-30  
Modified Date
2016-07-06  
Seq
2016-4474  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
109769 20110 CVE-2016-4474 RHSA-2016:1222  View
109770 20110 CVE-2016-4474 https://access.redhat.com/security/vulnerabilities/2359821  View
109771 20110 CVE-2016-4474 RHSA-2016:1223  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2675 JVNDB-2016-003448 Red Hat OpenStack Platform および Enterprise Linux OpenStack Platform の director におけるアクセス権を取得される脆弱性 Red Hat OpenStack Platform の director、および Enterprise Linux OpenStack Platform の director (別名 overcloud-full) のオーバークラウドイメージのイメージビルド処理は、デフォルトの root パスワード ROOTPW を使用するため、アクセス権を取得される脆弱性が存在します。 CVE-2016-4474 90980 CVE-2016-4474 20110 3.3 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003448.html 2016-06-13 2016-07-08 View