Red Hat OpenStack: Mehrere Schwachstellen
WID-SEC-2024-1228 · first 23.05.2024 · updated 16.04.2026 · CVSS 7,5
What it is about
Red Hat OpenStack ist eine Sammlung von Diensten, um Cloud-Computing in Form von Infrastructure as a Service (IaaS) bereitstellen zu können. Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Sicherheitsmaßnahmen zu umgehen, eine Denial-of-Service-Zustand zu erzeugen, um vertrauliche Informationen offenzulegen und Daten zu ändern.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- Sicherheitsmaßnahmen zu umgehen
- eine Denial-of-Service-Zustand zu erzeugen
- vertrauliche Informationen offenzulegen
- Daten zu ändern
Am I affected?
Affected according to the BSI:
- Red Hat Enterprise Linux
- Red Hat OpenStack 16.2
- Red Hat OpenStack <17.1
- IBM MQ Operator
- Red Hat OpenShift Container Platform <4.15.39
- Red Hat OpenShift Container Platform <4.12.72
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Red Hat OpenStack 17.1
- Red Hat OpenShift Container Platform 4.15.39
- Red Hat OpenShift Container Platform 4.12.72
Is the vulnerability already being exploited?
- CVE-2023-44487: exploited in the wild according to CISA, in the catalogue since 10.10.2023.
- According to a CISA advisory, used by actors from : 2023 Top Routinely Exploited Vulnerabilities (11/2024)
Information and sources
- Original BSI advisory (WID)
- Red Hat Security Advisory RHSA-2024:2727 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2729 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2730 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2767 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2731 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2732 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2733 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2734 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2735 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2768 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2736 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2770 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2737 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:2769 vom 2024-05-22 access.redhat.com
- Red Hat Security Advisory RHSA-2024:3352 vom 2024-05-23 access.redhat.com
- Red Hat Security Advisory RHSA-2024:3327 vom 2024-05-29 access.redhat.com
- Red Hat Security Advisory RHSA-2024:3331 vom 2024-05-30 access.redhat.com
- Red Hat Security Advisory RHSA-2024:3467 vom 2024-05-29 access.redhat.com
- Red Hat Security Advisory RHSA-2024:3713 vom 2024-06-12 access.redhat.com
- Red Hat Security Advisory RHSA-2024:4054 vom 2024-06-24 access.redhat.com
- Red Hat Security Advisory RHSA-2024:7987 vom 2024-10-10 access.redhat.com
- Red Hat Security Advisory RHSA-2024:8688 vom 2024-11-06 access.redhat.com
- Red Hat Security Advisory RHSA-2024:8692 vom 2024-11-07 access.redhat.com
- Red Hat Security Advisory RHSA-2024:10142 vom 2024-11-26 access.redhat.com
- Red Hat Security Advisory RHSA-2025:0832 vom 2025-02-06 access.redhat.com
and 2 more sources in the original advisory
CVE: CVE-2024-1135, CVE-2023-39325, CVE-2023-44487, CVE-2023-45288, CVE-2024-4438, CVE-2023-39326, CVE-2023-45287, CVE-2024-1394, CVE-2024-24680, CVE-2024-1141, CVE-2023-45803, CVE-2023-48795, CVE-2023-6725, CVE-2023-6110, CVE-2024-22195
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.