CVE-2018-10898: Openstack Tripleo Heat Templates

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

Affected products

• Openstack Tripleo Heat Templates: before 8.0.2-40 (fixed in 8.0.2-40)
• Red Hat Openstack: version 13 only

Published 2018-07-30. Last modified 2026-06-17.