Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2023-6110 | fixed in 0:5.5.2-17.1.20230829210830.el9ost | Openstack: deleting a non existing access rule deletes another existing access rule in it's scope | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-9902 | | Ansible-core: ansible-core user may read/write unauthorized content | MEDIUM 6.3 | 0.3 % | ||
| CVE-2024-8007 | fixed in 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost | Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors | HIGH 8.1 | 0.4 % | ||
| CVE-2024-4840 | fixed in 0:14.3.1-17.1.20240919130756.el9ost | Rhosp-director: cleartext passwords exposed in logs | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-4438 | fixed in 0:3.4.26-8.el9ost | Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2023-6725 | fixed in 0:14.3.1-17.1.20231103010840.el9ost | Tripleo-ansible: bind keys are world readable | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-1141 | fixed in 0:2.5.1-17.1.20230621023901.el9ost | Glance-store: glance store access key logged in debug log level | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-5625 | fixed in 0:0.30.2-4.el9ost | Python-eventlet: patch regression for cve-2021-21419 in some red hat builds | HIGH 7.5 | 1.0 % |