CVE-2016-9599

puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TC...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory rhn.redhat.com
report bugzilla.redhat.com