CVE-2013-6470

Redhat Openstack - Authentication Bypass

Title source: rule

Description

The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid.

Scores

EPSS 0.0028
EPSS Percentile 51.0%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

redhat/openstack

Timeline

Published Jun 02, 2014
Tracked Since Feb 18, 2026