CVE:CVE-2016-6829
CNNVD:CNNVD-201608-346
Crowbar Framework是一套用在SUSE中的OpenStack安装框架。
Crowbar Framework中存在安全漏洞，该漏洞源于trove service用户在Openstack deployment和Trove Barclamp中有预设密码。攻击者可利用该漏洞获取访问权限。
solution:Upgrade barclamp-trove_project barclamp-trove to a higher version than -; Upgrade crowbar-openstack_project crowbar-openstack to a higher version than -