CVE-2017-15114

CVE-2017-15114 describes a critical vulnerability in Red Hat OpenStack Platform where libvirtd, when configured with TLS by OSP director, defaults to the same certificate authority as other non-libvirtd services. This misconfiguration allows these services to connect to libvirtd without additional authentication, effectively granting root access and enabling privilege escalation on compute nodes if another service is compromised. The vulnerability has a CVSS score of 8.1 (High), indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.