| Package | Affected versions | Patched versions |
|---|---|---|
| neutron | = 2014.1= 2014.1.1= juno1 | |
| pycadf | = 0.1= 0.1.1= 0.1.2= 0.1.3= 0.1.4= 0.1.5= 0.1.6= 0.1.7= 0.1.8= 0.1.9= 0.2= 0.2.1= 0.2.2= 0.3= 0.3.1= 0.4= 0.4.1≤ 0.5.0 | |
| telemetry (ceilometer) | = 2013.2= 2014.1 | |
| openstack | = 4.0 |
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free