5
CVSSv2

CVE-2013-6470

Published: 02/06/2014 Updated: 03/06/2014
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote malicious users to gain access by connecting to Qpid.

Vulnerable Product Search on Vulmon Subscribe to Product

redhat openstack 4.0

Vendor Advisories

The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 40, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid ...