Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (tripleo-ansible and openstack-tripleo-heat-templates) security update

Fixed packages 2

Vulnerabilities 1

• Medium 5.5
  CVE-2023-6725

  Tripleo-ansible: bind keys are world readable

  An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to acces…

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 17.1
  Mar 15, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2249273
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2770.json
• report
  https://access.redhat.com/security/cve/CVE-2023-6725
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6725
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6725