CVE-2014-4615

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before…

published August 19, 2014

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02774 · 86.2th percentile
Published
2014-08-19T18:00Z
EPSS history
Timeline
  • 19 AUG 18:00Z
    The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before…
    cvelistv5