[library] RabbitMQ management API port is opened on public IP addresses

Bug #1556570 reported by Serg Lystopad
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Invalid
High
Fuel Library (Deprecated)
6.1.x
Won't Fix
High
MOS Maintenance
Mitaka
Invalid
High
Fuel Library (Deprecated)

Bug Description

Detailed bug description:
MOS HA deployment has RabbitMQ management plugin enabled on controllers. It listens on 0.0.0.0 port 15672. As far as controllers has public IP addresses configured the management API is also exposed to the Internet.

Steps to reproduce:
Deploy HA environment with Fuel, try to access http://${PUBLIC_IP_ADDRESS_OF_ANY_CONTROLLER}:15672

Expected results:
You should see login screen of the RabbitMQ management plugin

Description of the environment:
api: '1.0'
astute_sha: 1ea8017fe8889413706d543a5b9f557f5414beae
auth_required: true
build_id: 2015-06-19_13-02-31
build_number: '525'
feature_groups:
- mirantis
fuel-library_sha: 2e7a08ad9792c700ebf08ce87f4867df36aa9fab
fuel-ostf_sha: 8fefcf7c4649370f00847cc309c24f0b62de718d
fuelmain_sha: a3998372183468f56019c8ce21aa8bb81fee0c2f
nailgun_sha: dbd54158812033dd8cfd7e60c3f6650f18013a37
openstack_version: 2014.2.2-6.1
production: docker
python-fuelclient_sha: 4fc55db0265bbf39c369df398b9dc7d6469ba13b
release: '6.1'
release_versions:
  2014.2.2-6.1:
    VERSION:
      api: '1.0'
      astute_sha: 1ea8017fe8889413706d543a5b9f557f5414beae
      build_id: 2015-06-19_13-02-31
      build_number: '525'
      feature_groups:
      - mirantis
      fuel-library_sha: 2e7a08ad9792c700ebf08ce87f4867df36aa9fab
      fuel-ostf_sha: 8fefcf7c4649370f00847cc309c24f0b62de718d
      fuelmain_sha: a3998372183468f56019c8ce21aa8bb81fee0c2f
      nailgun_sha: dbd54158812033dd8cfd7e60c3f6650f18013a37
      openstack_version: 2014.2.2-6.1
      production: docker
      python-fuelclient_sha: 4fc55db0265bbf39c369df398b9dc7d6469ba13b
      release: '6.1'

summary: - [library] RabbitMQ management API port is open on public IP addresses
+ [library] RabbitMQ management API port is opened on public IP addresses
Maciej Relewicz (rlu)
Changed in fuel:
milestone: none → 6.1-updates
importance: Undecided → High
assignee: nobody → Fuel Library Team (fuel-library)
Revision history for this message
Bogdan Dobrelya (bogdando) wrote :

Fixed for Mitaka

information type: Public → Public Security
Revision history for this message
Alexey Stupnikov (astupnikov) wrote :

We no longer support MOS5.1, MOS6.0, MOS6.1
We deliver only Critical/Security fixes to MOS7.0, MOS8.0.
We deliver only High/Critical/Security fixes to MOS9.2.

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.