{"id":"CVE-2015-5303","aliases":["EUVD-2016-0035","GHSA-m94p-8942-pm49","PYSEC-2016-35","RHSA-2015:2650","UBUNTU-CVE-2015-5303"],"status":"published","title":"OpenStack TripleO Heat templates spoof metadata requests","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01697,"percentile":0.77329,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-254"],"published":"2016-04-11T21:00:00Z","modified":"2026-08-01T10:02:30Z","fixes":[{"ecosystem":"PyPI","package":"tripleo-heat-templates","fixed_in":["0.8.10","0.8.9"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.10"}]}]},{"source":"osv","ecosystem":"PyPI","package":"tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.10"}]}],"versions":["0.5.6","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.7.8","0.7.9","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","0.8.8","0.8.9"]},{"source":"osv","ecosystem":"PyPI","package":"tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.9"}]}],"versions":["0.5.6","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.7.8","0.7.9","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","0.8.8"]},{"source":"osv","ecosystem":"Red Hat:openstack-director:7::el7","package":"openstack-tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-94.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack-director:7::el7","package":"python-rdomanager-oscplugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.10-22.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.1-1"]}],"products":[{"vendor":"openstack","product":"tripleo_heat_templates"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2015:2650","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web","advisory"]},{"url":"https://bugs.launchpad.net/tripleo/+bug/1516027","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5303","tags":["advisory"]},{"url":"https://github.com/openstack/tripleo-heat-templates/commit/1a0c7d97165c1b38dc9f78b82ac6ec8519fcf80c","tags":["web"]},{"url":"https://github.com/openstack/tripleo-heat-templates/commit/293f19b2a41386e1eea47a9e6add24b006c69c42","tags":["web"]},{"url":"https://opendev.org/openstack/tripleo-heat-templates/commit/1a0c7d97165c1b38dc9f78b82ac6ec8519fcf80c","tags":["web"]},{"url":"https://opendev.org/openstack/tripleo-heat-templates/commit/293f19b2a41386e1eea47a9e6add24b006c69c42","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tripleo-heat-templates/PYSEC-2016-35.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-m94p-8942-pm49","tags":["advisory"]},{"url":"https://github.com/openstack/tripleo-heat-templates","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/release-notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1252083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1261863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1275324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1275812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290796","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2650.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5303","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5329","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5329","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-5303","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5303","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","status":"published","published":"2016-04-11T21:00:00Z","modified":"2024-08-06T06:41:09.259Z","updated_at":"2026-11-02T14:35:40.217028Z"}],"euvd":[{"id":"EUVD-2016-0035","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","status":"published","published":"2016-04-11T21:00:00Z","modified":"2024-08-06T06:41:09Z","updated_at":"2026-11-03T02:22:00.305488Z"}],"ghsa":[{"id":"GHSA-m94p-8942-pm49","title":"OpenStack TripleO Heat templates spoof metadata requests","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","status":"published","published":"2022-05-17T03:56:55Z","modified":"2024-11-18T21:50:01Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:38:20.833758Z"}],"nvd":[{"id":"CVE-2015-5303","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","status":"published","published":"2016-04-11T21:59:03.1Z","modified":"2026-06-17T00:28:52.523Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-254"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"GHSA-m94p-8942-pm49","title":"OpenStack TripleO Heat templates spoof metadata requests","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","status":"published","published":"2022-05-17T03:56:55Z","modified":"2024-11-29T05:39:15.794095Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:46:51.463834Z"},{"id":"UBUNTU-CVE-2015-5303","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","status":"published","published":"2016-04-11T21:59:00Z","modified":"2025-10-24T04:45:26Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:10.385269Z"},{"id":"PYSEC-2016-35","description":"The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.","status":"published","published":"2016-04-11T21:59:00Z","modified":"2026-06-10T17:02:45.977123623Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"RHSA-2015:2650","title":"Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform 7 director update","status":"published","published":"2024-09-15T22:57:10Z","modified":"2026-08-01T10:02:30Z","updated_at":"2026-11-02T15:53:03.182161Z"}]}}