REDHAT-BUG-1064163: High severity red hat packstack vulnerability
Yair Fried of Red Hat reports:
A regression from Grizzly and Havana exists in the PackStack rules deployed to Neutron. Specifically when default security groups are enabled they are not enforced, allowing connectivity to systems that should be blocked by the security groups.
External references: https://review.openstack.org/#/c/62702/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1064163?
The severity of REDHAT-BUG-1064163 is classified as a high-risk vulnerability due to the potential exposure of systems to unwanted connectivity.
How do I fix REDHAT-BUG-1064163?
To mitigate REDHAT-BUG-1064163, ensure that security group settings are correctly configured and enforced within your OpenStack Neutron deployment.
What systems are affected by REDHAT-BUG-1064163?
The systems affected by REDHAT-BUG-1064163 include Red Hat PackStack and OpenStack Neutron.
Can REDHAT-BUG-1064163 lead to unauthorized access?
Yes, REDHAT-BUG-1064163 can lead to unauthorized access as it allows connectivity that should be restricted by default security groups.
Is there a workaround for REDHAT-BUG-1064163?
A temporary workaround for REDHAT-BUG-1064163 is to manually enforce security group rules until an official patch is applied.