Red Hat Security Advisory

RHSA-2015:0790

openstack-nova security, bug fix, and enhancement update

Released 2015-04-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-nova-2014.2.2-19.el7ost, openstack-nova-api-2014.2.2-19.el7ost, openstack-nova-cells-2014.2.2-19.el7ost +12

Fixes 1 record

TI-2015-00227 CVE-2015-0259 · GHSA-x8xr-rm9r-7mvf

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before…

LOW 25

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for acces…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.0107 Published 2015-04-01 Partial fix · 2014.1.4, 2014.2.3 CWE-345