High severity8.1NVD Advisory· Published Aug 21, 2024· Updated Jun 17, 2026

CVE-2024-8007

Description

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jqhph/Tripleo Commoninferred
Package: https://pypi.org/project/tripleo-common
Red Hat/Red Hat OpenStack Platformllm-create
Red Hat/openstack-tripleo-commonllm-fuzzy

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2024-8007nvdVendor Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
access.redhat.com/errata/RHSA-2024:9990nvd
access.redhat.com/errata/RHSA-2024:9991nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000