CVE-2018-10898

HIGH

openstack-tripleo-heat-templates < 8.0.2-40 - Use of Hard-coded Credentials

Title source: llm

Description

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

References (2)

Core 2

Core References

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:2214

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898

Scores

CVSS v3 8.8

EPSS 0.0017

EPSS Percentile 37.5%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-798

Status published

Products (2)

openstack/tripleo_heat_templates < 8.0.2-40

redhat/openstack 13

Published Jul 30, 2018

Tracked Since Feb 18, 2026