CVE-2024-8007

8.1 highEPSS 0.4%

High (8.1) in redhat openstack platform. EPSS 0.4% chance of exploitation in the next 30 days.

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2024-08-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:openstack_platform

References

https://access.redhat.com/errata/RHSA-2024:9990
https://access.redhat.com/errata/RHSA-2024:9991
https://access.redhat.com/security/cve/CVE-2024-8007
https://bugzilla.redhat.com/show_bug.cgi?id=2305975

Check your stack JSON