CVE-2015-5329
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux...
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
- Record
CVE-2015-5329- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
- Record
CVE-2015-5329- Updated
- 2026-11-02
EUVDEUVD-2015-5300 No score
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
- Record
EUVD-2015-5300- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cqm8-gw87-fxm6
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux...
The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
- Record
GHSA-cqm8-gw87-fxm6- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openstack-tripleo-heat-templatesRed Hat:openstack-director:7::el7 From an advisory covering 2 CVEs |
before 0:0.8.6-94.el7ost | 0:0.8.6-94.el7ost |
python-rdomanager-oscpluginRed Hat:openstack-director:7::el7 From an advisory covering 2 CVEs |
before 0:0.0.10-22.el7ost | 0:0.0.10-22.el7ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5329 is a high vulnerability (CVSS 7.3) in Redhat Openstack, published April 11, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. No source names a fixed version.
References
access.redhat.com/errata/RHSA-2015:2650
nvd.nist.gov/vuln/detail/CVE-2015-5329
bugzilla.redhat.com/show_bug.cgi?id=1281777
github.com/advisories/GHSA-cqm8-gw87-fxm6
Show 33 moreShow less
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2650.json
cve.org/CVERecord?id=CVE-2015-5303