CVE-2024-8007CWE-295

Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors

High · published August 21, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.2th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2024-08-21T13:40Z
EPSS history
Timeline
  • 21 AUG 13:40Z
    Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
    cvelistv5