High severity8.1NVD Advisory· Published Nov 27, 2017· Updated Jun 17, 2026
CVE-2017-15114
CVE-2017-15114
Description
When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/nvdPatchVendor Advisory
- www.securityfocus.com/bid/101971nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.