CVE-2013-6470

The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2014-06-02

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Openstack (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2014-0517.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1051994