CVE-2013-6470

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-02 · updated 2026-06-17
Weakness: CWE-287

Description

The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid.

Affected products

OpenStack: 4.0

References

http://rhn.redhat.com/errata/RHSA-2014-0517.html
https://bugzilla.redhat.com/show_bug.cgi?id=1051994
http://rhn.redhat.com/errata/RHSA-2014-0517.html
https://bugzilla.redhat.com/show_bug.cgi?id=1051994

Get alerted when CVE-2013-6470 or the next vulnerability affects your stack