Every CVE Search/ Get API key

CVE-2024-8007

Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors

8.1 HighFix available

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.39%Up 0.3 points since Aug 22, 2024
90%50%10%1%

What each source reports

CVE List Score used 8.1

Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

Record
CVE-2024-8007
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-295
Updated
2026-11-02
EUVDEUVD-2024-49528 8.1

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

Record
EUVD-2024-49528
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-w89j-rfr2-3vwq 7.5

A flaw was found in the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an...

A flaw was found in the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

Record
GHSA-w89j-rfr2-3vwq
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-295
Updated
2026-11-02
NVD 8.1

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

Record
CVE-2024-8007
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-295
Updated
2026-11-02
OSVRHSA-2024:9990 8.1

Red Hat Security Advisory: RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update

Record
RHSA-2024:9990
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:9991 8.1

Red Hat Security Advisory: RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update

Record
RHSA-2024:9991
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openstack-tripleo-common
Red Hat:openstack:17.1::el9
 before 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
openstack-tripleo-common-container-base
Red Hat:openstack:17.1::el9
 before 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
openstack-tripleo-common-containers
Red Hat:openstack:17.1::el9
 before 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
openstack-tripleo-common-devtools
Red Hat:openstack:17.1::el9
 before 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
python-tripleoclient
Red Hat:openstack:17.1::el9
 before 0:16.5.1-17.1.20240913100806.f3599d0.el9ost
0:16.5.1-17.1.20240913100806.f3599d0.el9ost
python3-tripleo-common
Red Hat:openstack:17.1::el9
 before 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
0:15.4.1-17.1.20240911100820.e5b18f2.el9ost
python3-tripleoclient
Red Hat:openstack:17.1::el9
 before 0:16.5.1-17.1.20240913100806.f3599d0.el9ost
0:16.5.1-17.1.20240913100806.f3599d0.el9ost
openstack-tripleo-common
Red Hat:openstack:17.1::el8
 before 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
openstack-tripleo-common-container-base
Red Hat:openstack:17.1::el8
 before 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
openstack-tripleo-common-containers
Red Hat:openstack:17.1::el8
 before 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
python-tripleoclient
Red Hat:openstack:17.1::el8
 before 0:16.5.1-17.1.20240913093745.f3599d0.el8ost
0:16.5.1-17.1.20240913093745.f3599d0.el8ost
python3-tripleo-common
Red Hat:openstack:17.1::el8
 before 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
0:15.4.1-17.1.20240911093743.e5b18f2.el8ost
python3-tripleoclient
Red Hat:openstack:17.1::el8
 before 0:16.5.1-17.1.20240913093745.f3599d0.el8ost
0:16.5.1-17.1.20240913093745.f3599d0.el8ost

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-8007 is a high vulnerability (CVSS 8.1) in Redhat Openstack Platform, published August 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in openstack-tripleo-common 0:15.4.1-17.1.20240911100820.e5b18f2.el9ost.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open