title: Rsync leaks information to undercloud
description: An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.
problem types: Transmission of Private Resources into a New Sphere ('Resource Leak')
affected:
{
product: instack-undercloud
vendor: n/a
defaultStatus: affected
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 13.0 - ELS
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: instack-undercloud
defaultStatus: affected
versions:
version: 0:8.4.9-13.el7ost, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:openstack:13::el7
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: instack-undercloud
defaultStatus: affected
versions:
version: 0:8.4.9-13.el7ost, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:openstack:13::el7
}
metrics:
other: [
content: {'value': 'Important', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]
workarounds: The rsync daemon is no longer needed and can be manually disabled by running the following commands on the undercloud:
sudo rm /etc/xinetd.d/rsync /etc/rsyncd.conf
sudo systemctl restart xinetd
However, this will be reverted if the undercloud gets updated.