CVE-2015-5329
HighSummary
The TripleO Heat templates in Red Hat Enterprise Linux OpenStack Platform 7.0 do not properly use the configured RabbitMQ credentials, making it easier for remote attackers to gain access to services in deployed overclouds by leveraging knowledge of the default credentials.
Risk Assessment
Attackers may gain unauthorized access to services, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update the configuration to properly use RabbitMQ credentials and avoid using default values.
Other vulnerabilities in TripleO Heat templates
Original NVD description (English source)
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.