CVE-2013-6491 in OpenStack
Summary
The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
11/04/2013
Disclosure
02/01/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66281 | Red Hat OpenStack cryptographic issue | 310 | Not defined | Official fix | CVE-2013-6491 |