CVE-2017-2621

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

• CWE-552
• CWE-532

• http://www.securityfocus.com/bid/96280Broken Link, Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1243Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1464Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/96280Broken Link, Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1243Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1464Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621Issue Tracking, Vendor Advisory

Published

Jul 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2615Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA em…5.5
• CVE-2017-2616A race condition was found in util-linux before 2.32.1 in th…5.5
• CVE-2017-2617hawtio before version 1.5.5 is vulnerable to remote code exe…7.6
• CVE-2017-2618A flaw was found in the Linux kernel's handling of clearing …5.5
• CVE-2017-2619Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable…7.5
• CVE-2017-2620Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD …5.5
• CVE-2017-2622An accessibility flaw was found in the OpenStack Workflow (m…5.9
• CVE-2017-2623It was discovered that rpm-ostree and rpm-ostree-client befo…5.3
• CVE-2017-2624It was found that xorg-x11-server before 1.19.0 including us…5.9
• CVE-2017-2625It was discovered that libXdmcp before 1.1.2 including used …6.5
• CVE-2017-2626It was discovered that libICE before 1.0.9-8 used a weak ent…5.2
• CVE-2017-2627A flaw was found in openstack-tripleo-common as shipped with…8.2