A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2024:9990 | |
| https://access.redhat.com/errata/RHSA-2024:9991 | |
| https://access.redhat.com/security/cve/CVE-2024-8007 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2305975 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Nov 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References |
|
23 Sep 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack. |
23 Aug 2024, 17:06
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| References | () https://access.redhat.com/security/cve/CVE-2024-8007 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2305975 - Issue Tracking, Vendor Advisory | |
| First Time |
Redhat openstack Platform
Redhat |
|
| CPE | cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:* |
21 Aug 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-21 14:15
Updated : 2024-11-25 05:15
NVD link : CVE-2024-8007
Mitre link : CVE-2024-8007
JSON object : View
Products Affected
redhat
- openstack_platform
CWE
No CWE.