Dougal Matthews

**Name of the Vulnerable Software and Affected Versions** tripleo-heat-templates (affected versions not specified) **Description** The issue allows remote attackers to spoof OpenStack Networking metadata requests. This is possible by leveraging knowledge of the default value of the `NeutronMetadataProxySharedSecret` parameter when the TripleO Heat templates are deployed via the command-line interface. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.