CVE-2024-8007
Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.
| CWE | CWE-295 |
| Published | Aug 21, 2024 |
| Last Updated | Feb 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for
Be the first to know when new high vulnerabilities are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 8
All versions affected Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 8
All versions affected Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 9
All versions affected Red Hat / Red Hat OpenStack Platform 17.1 for RHEL 9
All versions affected Red Hat / Red Hat OpenStack Platform 16.1
All versions affected Red Hat / Red Hat OpenStack Platform 16.2
All versions affected