Vulnerabilities > Openstack > Puppet Tripleo > 6.2.0

DATE CVE VULNERABILITY TITLE RISK
2018-04-24 CVE-2016-9599 Improper Access Control vulnerability in multiple products
puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values.
6.0