CVE-2024-28718
Published Apr 12, 2024An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.
Vendor/product archive
2 CVEs tagged to openstack / magnum — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they…