CVE:CVE-2016-9599
CNNVD:CNNVD-201804-1419
puppet-tripleo是一款用于安装、升级并对OpenStack进行操作的开源工具。
puppet-tripleo  5.5.0之前版本和6.2.0之前版本中存在安全漏洞。攻击者可借助空端口值利用该漏洞创建TCP/UDP规则，获取未授权资源的访问权限。
solution:Upgrade openstack puppet-tripleo to a higher version than 5.5.0,6.2.0,and avoid the version 5.5.0,6.2.0; Upgrade redhat openstack to a higher version than 10,and avoid the version 10