Red Hat Security Advisory

RHSA-2015:0839

python-django-horizon and python-django-openstack-auth update

Released 2015-04-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-dashboard-2014.1.4-1.el7ost, openstack-dashboard-theme-2014.1.4-1.el7ost, python-django-horizon-2014.1.4-1.el7ost +2

Fixes 1 record

TI-2014-06739 CVE-2014-8124 · GHSA-q878-vxpg-6qx6

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not…

LOW 28

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02944 Published 2014-12-12 Partial fix CWE-400