Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-6491

Опубликовано: 02 фев. 2014
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openstack:oslo:*:*:*:*:*:*:*:*
Версия до 2013 (включая)
cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00389
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

ubuntu
около 12 лет назад

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

redhat
почти 13 лет назад

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

debian
около 12 лет назад

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo bef ...

github
больше 3 лет назад

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS

Процентиль: 59%
0.00389
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310