Veracode Vulnerability DatabaseVERACODE:11443Authorization Bypass
0.003 Low
EPSS
Percentile
69.4%
openstack-foreman-installer is vulnerable to authorization bypass attacks. The vulnerability exists as the default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid.
References
rhn.redhat.com/errata/RHSA-2014-0517.html
access.redhat.com/security/updates/classification/#moderate
access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/4/html/Technical_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=1033247
bugzilla.redhat.com/show_bug.cgi?id=1049122
bugzilla.redhat.com/show_bug.cgi?id=1051994
bugzilla.redhat.com/show_bug.cgi?id=1053623
bugzilla.redhat.com/show_bug.cgi?id=1062699
bugzilla.redhat.com/show_bug.cgi?id=1064050
bugzilla.redhat.com/show_bug.cgi?id=1064056
bugzilla.redhat.com/show_bug.cgi?id=1068885
bugzilla.redhat.com/show_bug.cgi?id=1073087
bugzilla.redhat.com/show_bug.cgi?id=1073550
bugzilla.redhat.com/show_bug.cgi?id=1077818
bugzilla.redhat.com/show_bug.cgi?id=1078279
bugzilla.redhat.com/show_bug.cgi?id=1080638
bugzilla.redhat.com/show_bug.cgi?id=1084534
bugzilla.redhat.com/show_bug.cgi?id=1085547
bugzilla.redhat.com/show_bug.cgi?id=1087713
bugzilla.redhat.com/show_bug.cgi?id=1088608
bugzilla.redhat.com/show_bug.cgi?id=1088611
bugzilla.redhat.com/show_bug.cgi?id=1095853
bugzilla.redhat.com/show_bug.cgi?id=1099661
bugzilla.redhat.com/show_bug.cgi?id=1100411
rhn.redhat.com/errata/RHSA-2014-0517.html
Related
