{"id":"CVE-2015-5329","aliases":["EUVD-2015-5300","GHSA-cqm8-gw87-fxm6","RHSA-2015:2650"],"status":"published","title":"The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux...","description":"The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.","severity":{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01517,"percentile":0.74703,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2016-04-11T21:00:00Z","modified":"2026-08-01T10:02:30Z","affected":[{"source":"osv","ecosystem":"Red Hat:openstack-director:7::el7","package":"openstack-tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-94.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack-director:7::el7","package":"python-rdomanager-oscplugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.10-22.el7ost"}]}],"bundled":2}],"products":[{"vendor":"redhat","product":"openstack"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2015:2650","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5329","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281777","tags":["report"]},{"url":"https://github.com/advisories/GHSA-cqm8-gw87-fxm6"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/release-notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1252083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1261863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1268415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1275324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1275812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1287624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290796","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2650.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5303","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5329","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-5329","description":"The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.","status":"published","published":"2016-04-11T21:00:00Z","modified":"2024-08-06T06:41:09.414Z","updated_at":"2026-11-02T14:35:39.447402Z"}],"euvd":[{"id":"EUVD-2015-5300","description":"The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.","status":"published","published":"2016-04-11T21:00:00Z","modified":"2024-08-06T06:41:09Z","updated_at":"2026-11-03T02:22:00.863884Z"}],"ghsa":[{"id":"GHSA-cqm8-gw87-fxm6","title":"The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux...","description":"The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.","status":"published","published":"2022-05-17T03:57:16Z","modified":"2023-02-10T05:06:39Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2015-5329","description":"The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.","status":"published","published":"2016-04-11T21:59:05.1Z","modified":"2026-06-17T00:28:56.327Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"RHSA-2015:2650","title":"Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform 7 director update","status":"published","published":"2024-09-15T22:57:10Z","modified":"2026-08-01T10:02:30Z","updated_at":"2026-11-02T15:53:03.182161Z"}]}}