Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-6491HistoryFeb 02, 2014 - 12:55 a.m.
CVE-2013-6491
2014-02-0200:55:00
Debian Security Bug Tracker
security-tracker.debian.org
14
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
65.4%
The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nova | < 2013.2.3-1 | nova_2013.2.3-1_all.deb |
| Debian | 11 | all | nova | < 2013.2.3-1 | nova_2013.2.3-1_all.deb |
| Debian | 10 | all | nova | < 2013.2.3-1 | nova_2013.2.3-1_all.deb |
| Debian | 999 | all | nova | < 2013.2.3-1 | nova_2013.2.3-1_all.deb |
Related
nessus
nessus
Ubuntu 12.10 : quantum vulnerability (USN-2208-2)
2014-05-07 00:00:00
Ubuntu 12.10 : cinder vulnerability (USN-2208-1)
2014-05-07 00:00:00
Ubuntu 14.04 LTS : OpenStack Nova vulnerabilities (USN-2247-1)
2014-06-18 00:00:00
securityvulns
securityvulns
[USN-2208-1] OpenStack Cinder vulnerability
2014-05-07 00:00:00
[USN-2208-2] OpenStack Quantum vulnerability
2014-05-07 00:00:00
OpenStack multiple security vulnerabilities
2014-05-07 00:00:00
openvas
openvas
Ubuntu Update for cinder USN-2208-1
2014-05-12 00:00:00
Ubuntu Update for quantum USN-2208-2
2014-05-12 00:00:00
Ubuntu: Security Advisory (USN-2208-2)
2014-05-12 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 08:54:11
cve
cve
CVE-2013-6491
2014-02-02 00:55:00
ubuntu
ubuntu
OpenStack Cinder vulnerability
2014-05-06 00:00:00
OpenStack Quantum vulnerability
2014-05-06 00:00:00
OpenStack Nova vulnerabilities
2014-06-17 00:00:00
prion
prion
Design/Logic Flaw
2014-02-02 00:55:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2013-6491
2014-02-01 00:00:00
redhat
redhat
(RHSA-2014:0112) Moderate: openstack-nova security and bug fix update
2014-01-30 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
65.4%
Related for DEBIANCVE:CVE-2013-6491