Candidate: CVE-2015-5271
PublicDate: 2016-04-15 17:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5271
Description:
 The TripleO Heat templates (tripleo-heat-templates) do not properly order
 the Identity Service (keystone) before the OpenStack Object Storage (Swift)
 staticweb middleware in the swiftproxy pipeline when the staticweb
 middleware is enabled, which might allow remote attackers to obtain
 sensitive information from private containers via unspecified vectors.
Ubuntu-Description:
Notes:
Bugs:
 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5271
 https://bugs.launchpad.net/tripleo/+bug/1494896
Priority: medium
Discovered-by: Christian Schwede and Emilien Macchi
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [7.5 HIGH]

Patches_tripleo-heat-templates:
upstream_tripleo-heat-templates: released (5.2.0-1)
precise_tripleo-heat-templates: DNE
precise/esm_tripleo-heat-templates: DNE
trusty_tripleo-heat-templates: DNE
trusty/esm_tripleo-heat-templates: DNE
vivid_tripleo-heat-templates: ignored (reached end-of-life)
vivid/stable-phone-overlay_tripleo-heat-templates: DNE
vivid/ubuntu-core_tripleo-heat-templates: DNE
wily_tripleo-heat-templates: ignored (reached end-of-life)
xenial_tripleo-heat-templates: not-affected (code not present)
yakkety_tripleo-heat-templates: ignored (reached end-of-life)
zesty_tripleo-heat-templates: ignored (reached end-of-life)
artful_tripleo-heat-templates: ignored (reached end-of-life)
bionic_tripleo-heat-templates: not-affected (5.2.0-1)
cosmic_tripleo-heat-templates: DNE
devel_tripleo-heat-templates: DNE