{"action":"Upgrade tripleo-heat-templates to 0.8.7 or later.","affected":[{"fixed":"0.8.7","introduced":"0"}],"component":"tripleo-heat-templates","cve_ids":["CVE-2015-5271"],"ecosystem":"PyPI","epss":0.02435,"exploited":false,"fixed_versions":["0.8.7"],"ghsa_id":"GHSA-8936-44gw-7664","id":"tcs_01M5KF7Q57P8SYVM79CN3K20TR","modified_at":"2024-11-18T22:07:57.154431Z","published_at":"2022-05-17T03:56:29Z","references":["https://osv.dev/vulnerability/GHSA-8936-44gw-7664","https://nvd.nist.gov/vuln/detail/CVE-2015-5271","https://access.redhat.com/errata/RHSA-2015:1862","https://access.redhat.com/security/cve/CVE-2015-5271","https://bugs.launchpad.net/tripleo/+bug/1494896","https://bugzilla.redhat.com/show_bug.cgi?id=1261697","https://git.openstack.org/cgit/openstack/tripleo-heat-templates","https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=1730d95acdbee7c7bbcfe1eba8a48ef2b0cc1476","https://github.com/pypa/advisory-database/tree/main/vulns/tripleo-heat-templates/PYSEC-2016-34.yaml","https://launchpadlibrarian.net/217268516/CVE-2015-5271_puppet-swift.patch","https://review.openstack.org/226541"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8936-44gw-7664","url":"https://osv.dev/vulnerability/GHSA-8936-44gw-7664"}],"summary":"TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers"}