Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:tripleo_heat_templates:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductTripleo Heat Templates (02dcf398-06a5-5d72-8445-e6bce7972f03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/tripleo-heat-templates purl2cpe 2026-06-01 10:17:02.923104
pkg:github/openstack/tripleo-heat-templates purl2cpe 2026-06-01 10:17:02.923107
pkg:pypi/tripleo-heat-templates purl2cpe 2026-06-01 10:17:02.923110

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5271 vulnerable 2026-06-03 14:34:59.093071 Details available
The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline when the staticweb middleware is enabled, which might allow remote attackers to obtain sensitive information from private containers via unspecified vectors.
Published: 2016-04-15T17:00:00.000Z
Updated: 2024-08-06T06:41:09.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.