Lucene search

K
redhatRedHatRHSA-2014:0517
HistoryMay 29, 2014 - 12:00 a.m.

(RHSA-2014:0517) Moderate: openstack-foreman-installer security, bug fix, and enhancement update

2014-05-2900:00:00
access.redhat.com
18

0.003 Low

EPSS

Percentile

69.4%

The openstack-foreman-installer package provides facilities for rapidly
deploying Red Hat Enterprise Linux OpenStack Platform 4.

It was discovered that the Qpid configuration created by
openstack-foreman-installer did not have authentication enabled when run
with default settings in standalone mode. An attacker able to establish a
TCP connection to Qpid could access any OpenStack back end using Qpid (for
example, nova) without any authentication. (CVE-2013-6470)

This update also fixes several bugs and adds enhancements. Documentation
for these changes is available in the Technical Notes document linked to
in the References section.

All openstack-foreman-installer users are advised to upgrade to this
updated package, which corrects these issues and adds these enhancements.

0.003 Low

EPSS

Percentile

69.4%

Related for RHSA-2014:0517