CVE-2013-6470 — Improper Authentication in Redhat Openstack

CWE-287 — Improper Authentication5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.3%
top 48.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Openstack
Timeline
PublishedJun 2
Latest updateMay 17

Description

The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-6m3c-qm8q-jf8f: The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenSta↗2022-05-17
▶
CVEList
CVE-2013-6470: The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenSta↗2014-06-02
▶

📋Vendor Advisories

1
Red Hat
foreman-installer: insecure defaults↗2014-05-29
▶

💬Community

1
Bugzilla
CVE-2013-6470 openstack foreman-installer: insecure defaults↗2014-01-13
▶
CVE-2013-6470 — Improper Authentication in Redhat | cvebase