CVE-2017-7549: openstack instack-undercloud Insecure Temporary File
Vulnerability summary
CVE-2017-7549 is a medium (CVSS 6.4) Insecure Temporary File vulnerability in openstack instack-undercloud. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27% of scored vulnerabilities.
Timeline
- 21-09-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · PypiEcosystem advisory · calculated6.4MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
- OSV · Red hatEcosystem advisory · calculated6.1MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:NDiffers
EPSS trend
Probability
0.35%
Chance of exploitation in the next 30 days
Percentile
27%
Versus all other CVEs
30-day change
0.00 pp
From 0.35% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-377Insecure Temporary FileCreating and using insecure temporary files can leave application and system data vulnerable to attack.
- CWE-59Improper Link Resolution Before File Access ('Link Following')The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Affected systems
PyPI2 products
- instack≤ 5.3.0
- instack-undercloud≤ 7.2.0
Openstack1 product
- instack-undercloud7.2.0 | 6.1.0 | 5.3.0
Red hat, inc.1 product
- instack-undercloudPike, 12: v7.2.0, Ocata, 11: v6.1.0, Newton, 10: v5.3.0
Redhat1 product
- instack-undercloud< 0:4.0.0-17.el7ost | < 0:5.3.0-3.el7ost | < 0:2.2.7-10.el7ost | < 0:2.1.2-41.el7ost | < 0:6.1.0-3.el7ost
4 vendors · 5 products
References
25 links- bugzilla.redhat.com/show_bug.cgi?id=1477403X Refsource CONFIRMIssue TrackingVendor AdvisoryWEBREPORT
