CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.
CVE
CVE-2016-7404
Severity
CRITICAL
CVSS
9.8
EPSS
1.87%
Original NVD Description
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform.
Related CVEs
Other vulnerabilities affecting the same vendor(s)