Lucene search
HistoryJun 02, 2014 - 3:55 p.m.
CVE-2013-6470
cve-2013-6470
openstack
foreman installer
red hat enterprise linux
nvd
authentication
qpid
remote attackers
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.5%
The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid.
Affected configurations
Node
redhatopenstackMatch4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:openstack | redhat openstack | eq | 4.0 |
Related
veracode
veracode
Authorization Bypass
2019-01-15 09:02:08
nvd
nvd
CVE-2013-6470
2014-06-02 15:55:10
prion
prion
Default configuration
2014-06-02 15:55:00
cvelist
cvelist
CVE-2013-6470
2014-06-02 15:00:00
redhat
redhat
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.5%
Related for CVE-2013-6470