Field Assessment
AI analysis pending.
CVE
CVE-2016-7404
Severity
CRITICAL
CVSS
9.8
EPSS
1.87%
Original Filing — NVD Description
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform.