https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:48:38 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-00667 cnvd-2018-00667 https://cve.radiocsirt.org/vuln/cnvd-2018-00667 https://cve.radiocsirt.org/vuln/euvd-2026-165769 EUVD-2026-165769 https://cve.radiocsirt.org/vuln/euvd-2026-165769 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12155 <p>A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.</p> <p>A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12155 https://cve.radiocsirt.org/vuln/ghsa-w8gx-hhcx-px6w <p><strong>Affected:</strong> PyPI: tripleo-heat-templates</p> <p>A resource-permission flaw was found in the `tripleo-heat-templates` package where `ceph.client.openstack.keyring` is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. This has been patched in versions [7.0.6](https://github.com/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4) and [8.0.0](https://github.com/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30).</p> <p><strong>Affected:</strong> PyPI: tripleo-heat-templates</p> <p>A resource-permission flaw was found in the `tripleo-heat-templates` package where `ceph.client.openstack.keyring` is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. This has been patched in versions [7.0.6](https://github.com/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4) and [8.0.0](https://github.com/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30).</p> https://cve.radiocsirt.org/vuln/ghsa-w8gx-hhcx-px6w https://cve.radiocsirt.org/vuln/gsd-2017-12155 gsd-2017-12155 https://cve.radiocsirt.org/vuln/gsd-2017-12155 https://cve.radiocsirt.org/vuln/pysec-2026-754 <p><strong>Affected:</strong> PyPI: tripleo-heat-templates</p> <p>A resource-permission flaw was found in the `tripleo-heat-templates` package where `ceph.client.openstack.keyring` is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. This has been patched in versions [7.0.6](https://github.com/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4) and [8.0.0](https://github.com/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30).</p> <p><strong>Affected:</strong> PyPI: tripleo-heat-templates</p> <p>A resource-permission flaw was found in the `tripleo-heat-templates` package where `ceph.client.openstack.keyring` is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume. This has been patched in versions [7.0.6](https://github.com/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4) and [8.0.0](https://github.com/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30).</p> https://cve.radiocsirt.org/vuln/pysec-2026-754 https://cve.radiocsirt.org/vuln/rhsa-2018:0602 <p>openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director</p> <p>openstack-tripleo-heat-templates: Ceph client keyring is world-readable when deployed by director</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0602 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12155 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tripleo-heat-templates, Ubuntu:18.04:LTS: tripleo-heat-templates</p> <p>A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tripleo-heat-templates, Ubuntu:18.04:LTS: tripleo-heat-templates</p> <p>A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12155