NVD

Id
32575  
Name
CVE-2014-4615  
Description
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-08-19  
Modified Date
2017-01-06  
Seq
2014-4615  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171593 32575 CVE-2014-4615 RHSA-2014:1050  View
171594 32575 CVE-2014-4615 60736  View
171595 32575 CVE-2014-4615 60766  View
171596 32575 CVE-2014-4615 [oss-security] 20140623 CVE request for vulnerability in OpenStack Neutron, Ceilometer and pyCADF library  View
171597 32575 CVE-2014-4615 [oss-security] 20140624 Re: CVE request for vulnerability in OpenStack Neutron, Ceilometer and pyCADF library  View
171598 32575 CVE-2014-4615 [oss-security] 20140625 [OSSA 2014-021] User token leak to message queue in pyCADF notifier middleware (CVE-2014-4615)  View
171599 32575 CVE-2014-4615 68149  View
171600 32575 CVE-2014-4615 USN-2311-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14993 JVNDB-2014-003868 複数の OpenStack 製品の通知ミドルウェアにおける X_AUTH_TOKEN 値を取得される脆弱性 OpenStack PyCADF、Telemetry (Ceilometer)、Neutron および Oslo の通知ミドルウェアには、X_AUTH_TOKEN 値を取得される脆弱性が存在します。 CVE-2014-4615 71904 CVE-2014-4615 32575 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003868.html 2014-08-11 2014-08-21 View