CVE-2013-6491 in OpenStack

Resumen (Inglés)

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2013-11-04

Divulgación

2014-02-01

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
66281	Red Hat OpenStack cifrado débil	310	No está definido	Arreglo oficial	CVE-2013-6491

Fuentes

• MITRE
• NVD
• CVE Details