Red Hat update for Red Hat OpenStack Platform director

1) Authentication bypass

EUVDB-ID: #VU6610

Risk: Low

CVSSv3.1: 6.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-2637

CWE-ID: CWE-287 - Improper Authentication

Exploit availability: No

Description

The vulnerability allows a remote unauthenticated attacker to bypass authentication on a targeted system.

The weakness exists due to the improper authentication and encryption standards that are set by default when the libvirtd component is deployed by the affected software. A remote attacker create a TCP connection to a compute host IP address, gain unauthorized access to the system that may allow to gain control of the host.

Successful exploitation of the vulnerability results in unauthorized access to the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Red Hat OpenStack: 7.0

CPE2.3

• cpe:2.3:a:red_hat:red_hat_openstack:7.0:*:*:*:*:*:*:

External links

http://access.redhat.com/errata/RHSA-2017:1537

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.