CVE-2018-10898 HIGH

CVE-2018-10898

Vendor [Unknown]
Product openstack-tripleo-heat-templates
Weakness CWE-798 · Hardcoded credentials
Published July 30, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

Key dates

02Disclosure timeline

July 30, 2018 CVE published
August 5, 2024 Record updated