Authentication Bypass

openstack octavia is vulnerable to authentication bypass. An attacker is able to bypass authentication and gain access to the application due to an incorrect configuration in cmd/agent.py whereby the gunicorn certreqs option is set to True instead of ssl.CERTREQUIRED...