Advisories · Technology

Red Hat OpenStack Platform 17.1 for RHEL 9.

Every CVE that names Red Hat OpenStack Platform 17.1 for RHEL 9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-8007 CVE record

CVSS 8.1 High

Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Red Hat OpenStack Platform 17.1 for RHEL 9
- Weak cryptography or TLS
Not analysed yet 21 Aug 2024
CVE-2024-4840 CVE record

CVSS 5.5 Medium

Rhosp-director: cleartext passwords exposed in logs
- Red Hat OpenStack Platform 17.1 for RHEL 9
- Red Hat OpenStack Platform 16.2
- Information disclosure
Not analysed yet 13 May 2024
CVE-2024-4438 CVE record

CVSS 7.5 High

Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
- Red Hat OpenStack Platform 16.1
- Red Hat OpenStack Platform 16.2
- Denial of service
Not analysed yet 8 May 2024
CVE-2023-6725 CVE record

CVSS 5.5 Medium

Tripleo-ansible: bind keys are world readable
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Red Hat OpenStack Platform 17.1 for RHEL 9
- CWE-1220
Not analysed yet 15 Mar 2024
CVE-2023-5625 CVE record

CVSS 5.3 Medium

Python-eventlet: patch regression for cve-2021-21419 in some red hat builds
- Ironic content for Red Hat OpenShift Container Platform 4.12
- Red Hat OpenStack Platform 17.1 for RHEL 8
- Denial of service
Not analysed yet 1 Nov 2023