CVE-2018-10898

HIGH

Redhat Openstack < 8.0.2-40 - Hard-coded Credentials

Title source: rule

Description

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

References (2)

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2018:2214

[Issue Tracking, Third Party Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898

Scores

CVSS v3 8.8

EPSS 0.0017

EPSS Percentile 37.8%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-798

Status published

Affected Products (2)

redhat/openstack

openstack/tripleo_heat_templates < 8.0.2-40

Timeline

Published Jul 30, 2018

Tracked Since Feb 18, 2026