VDB
CVE-2016-6829
CVE-2016-6829
PUBLISHED
CVSS 9.800000190734863 CRITICAL
The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.
EPSS 2.41% · 83.6th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
2.41%
83.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crowbar-openstack_project | crowbar-openstack | |
| barclamp-trove_project | barclamp-trove | |
| n/a | n/a | n/a |
Timeline
- Dec 8, 2016 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- [oss-security] 20160817 Re: CVE Request: Default password in openstack / crowbar trove mailing-list
- https://github.com/crowbar/barclamp-trove/commit/932298f250365fed6963700870e52db3a7a32daa url
- [oss-security] 20160816 CVE Request: Default password in openstack / crowbar trove mailing-list
- https://github.com/crowbar/crowbar-openstack/commit/208230bdfbcb19d062149d083b1a66b429516a69 url
- https://nvd.nist.gov/vuln/detail/CVE-2016-6829 advisory
- http://www.securityfocus.com/bid/92476 url
- https://www.suse.com/security/cve//CVE-2016-6829.html patch