CVE-2018-14620

{"containers": {"cna": {"affected": [{"product": "openstack-rabbitmq-container", "vendor": "Red Hat", "versions": [{"status": "affected", "version": "12, 13, 14"}]}], "datePublic": "2018-09-10T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable."}], "metrics": [{"cvssV3_0": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-494", "description": "CWE-494", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2018-09-21T09:57:01.000Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "RHSA-2018:2729", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2018:2729"}, {"name": "RHSA-2018:2721", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2018:2721"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2018-14620", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "openstack-rabbitmq-container", "version": {"version_data": [{"version_value": "12, 13, 14"}]}}]}, "vendor_name": "Red Hat"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable."}]}, "impact": {"cvss": [[{"vectorString": "4.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}]]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-494"}]}]}, "references": {"reference_data": [{"name": "RHSA-2018:2729", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:2729"}, {"name": "RHSA-2018:2721", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2018:2721"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T09:29:51.955Z"}, "title": "CVE Program Container", "references": [{"name": "RHSA-2018:2729", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2018:2729"}, {"name": "RHSA-2018:2721", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2018:2721"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2018-14620", "datePublished": "2018-09-10T19:00:00.000Z", "dateReserved": "2018-07-27T00:00:00.000Z", "dateUpdated": "2024-08-05T09:29:51.955Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "openstack-rabbitmq-container", "vendor": "Red Hat", "versions": [{"status": "affected", "version": "12, 13, 14"}]}], "source": "secalert@redhat.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*", "matchCriteriaId": "4D4AC996-B340-4A14-86F7-FF83B4D5EC8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*", "matchCriteriaId": "704CFA1A-953E-4105-BFBE-406034B83DED", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable."}, {"lang": "es", "value": "La imagen del contenedor de OpenStack RabbitMQ recupera de forma insegura el componente rabbitmq_clusterer por HTTP durante la fase de construcci\u00f3n. Esto podr\u00eda permitir que un atacante sirva c\u00f3digo malicioso al builder de imagen e instale la imagen de contenedor resultante. Se cree que las versiones de openstack-rabbitmq-container y openstack-containers tal y como se distribuyen con Red Hat Openstack 12, 13 y 14 son vulnerables."}], "id": "CVE-2018-14620", "lastModified": "2026-06-17T01:41:18.390", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 2.7, "source": "secalert@redhat.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-09-10T19:29:00.190", "references": [{"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2018:2721"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2018:2729"}, {"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2018:2721"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2018:2729"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-494"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-aodh-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-aodh-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-aodh-evaluator:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-aodh-listener:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-aodh-notifier:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ceilometer-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ceilometer-central:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ceilometer-compute:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ceilometer-ipmi:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ceilometer-notification:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-cinder-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-cinder-backup:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-cinder-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-cinder-scheduler:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-cinder-volume:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-collectd:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-cron:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-dependencies:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ec2-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-etcd:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-fluentd:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-glance-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-glance-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-gnocchi-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-gnocchi-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-gnocchi-metricd:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-gnocchi-statsd:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-haproxy:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-heat-all:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-heat-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-heat-api-cfn:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-heat-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-heat-engine:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-horizon:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ironic-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ironic-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ironic-conductor:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ironic-inspector:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ironic-pxe:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-iscsid:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-keystone:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-keystone-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-manila-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-manila-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-manila-scheduler:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-manila-share:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-mariadb:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-memcached:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-mistral-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-mistral-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-mistral-engine:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-mistral-event-engine:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-mistral-executor:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-multipathd:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-dhcp-agent:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-l3-agent:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-metadata-agent:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-openvswitch-agent:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-server:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-server-opendaylight:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-neutron-sriov-agent:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-compute:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-compute-ironic:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-conductor:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-consoleauth:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-libvirt:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-novncproxy:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-placement-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-nova-scheduler:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-octavia-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-octavia-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-octavia-health-manager:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-octavia-housekeeping:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-octavia-worker:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-opendaylight:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ovn-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ovn-controller:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ovn-nb-db-server:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ovn-northd:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-ovn-sb-db-server:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-panko-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-panko-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-rabbitmq:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-redis:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-sahara-api:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-sahara-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-sahara-engine:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-sensu-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-sensu-client:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-swift-account:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-swift-base:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-swift-container:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-swift-object:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-swift-proxy-server:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2729", "cpe": "cpe:/a:redhat:openstack:12::el7", "package": "rhosp12/openstack-zaqar:12.0-20180910.1", "product_name": "Red Hat OpenStack Platform 12.0 (Pike)", "release_date": "2018-09-20T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-aodh-api:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-aodh-base:13.0-62", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-aodh-evaluator:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-aodh-listener:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-aodh-notifier:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-barbican-api:13.0-50", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-barbican-base:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-barbican-keystone-listener:13.0-52", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-barbican-worker:13.0-52", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-base:13.0-84", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ceilometer-base:13.0-59", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ceilometer-central:13.0-53", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ceilometer-compute:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ceilometer-ipmi:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ceilometer-notification:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-cinder-api:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-cinder-backup:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-cinder-base:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-cinder-scheduler:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-cinder-volume:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-collectd:13.0-49", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-cron:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-dependencies:13.0-68", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ec2-api:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-etcd:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-fluentd:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-glance-api:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-glance-base:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-gnocchi-api:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-gnocchi-base:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-gnocchi-metricd:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-gnocchi-statsd:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-haproxy:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-heat-all:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-heat-api:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-heat-api-cfn:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-heat-base:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-heat-engine:13.0-53", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-horizon:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ironic-api:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ironic-base:13.0-59", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ironic-conductor:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ironic-inspector:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ironic-pxe:13.0-48", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-iscsid:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-keystone:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-keystone-base:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-kuryr-cni:13.0-83", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-kuryr-controller:13.0-77", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-manila-api:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-manila-base:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-manila-scheduler:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-manila-share:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-mariadb:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-memcached:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-mistral-api:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-mistral-base:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-mistral-engine:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-mistral-event-engine:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-mistral-executor:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-multipathd:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-base:13.0-63", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-dhcp-agent:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-l3-agent:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-metadata-agent:13.0-59", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-metadata-agent-ovn:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-openvswitch-agent:13.0-59", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-server:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-server-opendaylight:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-server-ovn:13.0-51", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-neutron-sriov-agent:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-api:13.0-59", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-base:13.0-67", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-compute:13.0-61", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-compute-ironic:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-conductor:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-consoleauth:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-libvirt:13.0-63", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-novncproxy:13.0-61", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-placement-api:13.0-59", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-nova-scheduler:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-octavia-api:13.0-52", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-octavia-base:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-octavia-health-manager:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-octavia-housekeeping:13.0-54", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-octavia-worker:13.0-53", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-openvswitch-base:13.0-43", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ovn-base:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ovn-controller:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ovn-nb-db-server:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ovn-northd:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-ovn-sb-db-server:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-panko-api:13.0-56", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-panko-base:13.0-60", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-rabbitmq:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-redis:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-redis-base:13.0-44", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-sahara-api:13.0-53", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-sahara-base:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-sahara-engine:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-sensu-base:13.0-53", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-sensu-client:13.0-52", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-swift-account:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-swift-base:13.0-59", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-swift-container:13.0-58", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-swift-object:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-swift-proxy-server:13.0-55", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-tempest:13.0-50", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}, {"advisory": "RHSA-2018:2721", "cpe": "cpe:/a:redhat:openstack:13::el7", "package": "rhosp13/openstack-zaqar:13.0-57", "product_name": "Red Hat OpenStack Platform 13.0 (Queens)", "release_date": "2018-09-18T00:00:00Z"}], "bugzilla": {"description": "openstack-rabbitmq-container: Insecure download of rabbitmq_clusterer during docker build", "id": "1626953", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1626953"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "status": "verified"}, "cwe": "CWE-494", "details": ["The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.", "The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP, without validation, during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image."], "name": "CVE-2018-14620", "package_state": [{"cpe": "cpe:/a:redhat:openstack:14", "fix_state": "Not affected", "package_name": "openstack-rabbitmq-container", "product_name": "Red Hat OpenStack Platform 14 (Rocky)"}], "public_date": "2018-09-10T15:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2018-14620\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-14620"], "threat_severity": "Moderate"}

{}