CVE-2015-1842
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a...
10.0 HighFix available
CVE-2015-1842 is a high vulnerability (CVSS 10.0) in Redhat Openstack, published April 10, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.18%, the 92nd percentile. Fixed in openstack-packstack 0:2014.2-0.20.dev1467.g70c9655.el7ost.
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.
Exploit likelihood
5.18%Up 3.9 points since Feb 4, 2022
What each source reports
NVD Score used
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.
- Record
CVE-2015-1842- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.
- Record
CVE-2015-1842- Updated
- 2026-11-02
EUVDEUVD-2015-1953 No score
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.
- Record
EUVD-2015-1953- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x735-34cq-fm2q No score
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a...
The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.
- Record
GHSA-x735-34cq-fm2q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openstack-packstackRed Hat:openstack:6::el7 |
before 0:2014.2-0.20.dev1467.g70c9655.el7ost | 0:2014.2-0.20.dev1467.g70c9655.el7ost |
openstack-packstack-docRed Hat:openstack:6::el7 |
before 0:2014.2-0.20.dev1467.g70c9655.el7ost | 0:2014.2-0.20.dev1467.g70c9655.el7ost |
openstack-packstack-puppetRed Hat:openstack:6::el7 |
before 0:2014.2-0.20.dev1467.g70c9655.el7ost | 0:2014.2-0.20.dev1467.g70c9655.el7ost |
openstack-puppet-modulesRed Hat:openstack:6::el7 |
before 0:2014.2.13-2.el7ost | 0:2014.2.13-2.el7ost |
foreman-discovery-imageRed Hat:openstack-installer:6::el7 |
before 0:7.0-20150227.0.el7ost | 0:7.0-20150227.0.el7ost |
foreman-proxyRed Hat:openstack-installer:6::el7 |
before 0:1.6.0.30-6.el7ost | 0:1.6.0.30-6.el7ost |
openstack-foreman-installerRed Hat:openstack-installer:6::el7 |
before 0:3.0.22-1.el7ost | 0:3.0.22-1.el7ost |
openstack-puppet-modulesRed Hat:openstack-installer:6::el7 |
before 0:2014.2.13-2.el7ost | 0:2014.2.13-2.el7ost |
rhel-osp-installerRed Hat:openstack-installer:6::el7 |
before 1:0.5.7-1.el7ost | 1:0.5.7-1.el7ost |
rhel-osp-installer-clientRed Hat:openstack-installer:6::el7 |
before 1:0.5.7-1.el7ost | 1:0.5.7-1.el7ost |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ruby193-rubygem-staypuftRed Hat:openstack-installer:6::el7 |
before 0:0.5.22-1.el7ost | 0:0.5.22-1.el7ost |
ruby193-rubygem-staypuft-docRed Hat:openstack-installer:6::el7 |
before 0:0.5.22-1.el7ost | 0:0.5.22-1.el7ost |
augeasRed Hat:openstack-installer:5::el6 |
before 0:1.0.0-7.el6_6.1 | 0:1.0.0-7.el6_6.1 |
augeas-debuginfoRed Hat:openstack-installer:5::el6 |
before 0:1.0.0-7.el6_6.1 | 0:1.0.0-7.el6_6.1 |
openstack-foreman-installerRed Hat:openstack-installer:5::el6 |
before 0:2.0.34-1.el6ost | 0:2.0.34-1.el6ost |
openstack-puppet-modulesRed Hat:openstack-installer:5::el6 |
before 0:2014.1.2-1.el6ost | 0:2014.1.2-1.el6ost |
rhel-osp-installerRed Hat:openstack-installer:5::el6 |
before 1:0.4.7-2.el6ost | 1:0.4.7-2.el6ost |
ruby193-rubygem-staypuftRed Hat:openstack-installer:5::el6 |
before 0:0.4.15-1.el6ost | 0:0.4.15-1.el6ost |
ruby193-rubygem-staypuft-docRed Hat:openstack-installer:5::el6 |
before 0:0.4.15-1.el6ost | 0:0.4.15-1.el6ost |
openstack-packstackRed Hat:openstack:5::el7 |
before 0:2014.1.1-0.46.dev1280.el7ost | 0:2014.1.1-0.46.dev1280.el7ost |
openstack-packstack-docRed Hat:openstack:5::el7 |
before 0:2014.1.1-0.46.dev1280.el7ost | 0:2014.1.1-0.46.dev1280.el7ost |
openstack-packstack-puppetRed Hat:openstack:5::el7 |
before 0:2014.1.1-0.46.dev1280.el7ost | 0:2014.1.1-0.46.dev1280.el7ost |
openstack-puppet-modulesRed Hat:openstack:5::el7 |
before 0:2014.1.2-1.el7ost | 0:2014.1.2-1.el7ost |
openstack-packstackRed Hat:openstack:5::el6 |
before 0:2014.1.1-0.46.dev1280.el6ost | 0:2014.1.1-0.46.dev1280.el6ost |
openstack-packstack-docRed Hat:openstack:5::el6 |
before 0:2014.1.1-0.46.dev1280.el6ost | 0:2014.1.1-0.46.dev1280.el6ost |
openstack-packstack-puppetRed Hat:openstack:5::el6 |
before 0:2014.1.1-0.46.dev1280.el6ost | 0:2014.1.1-0.46.dev1280.el6ost |
openstack-puppet-modulesRed Hat:openstack:5::el6 |
before 0:2014.1.2-1.el6ost | 0:2014.1.2-1.el6ost |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
rhn.redhat.com/errata/RHSA-2015-0791.html
bugzilla.redhat.com/show_bug.cgi?id=1201875
securityfocus.com/bid/74049
Show 79 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-1842
access.redhat.com/errata/RHSA-2015:0789
github.com/advisories/GHSA-x735-34cq-fm2q
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0789.json
cve.org/CVERecord?id=CVE-2015-1842