tocsin

Debian/nova: unknown

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authenticatio

Action: Upgrade nova to 2014.1.3-11 or later.

Affected

introducedfixedlast affected
02014.1.3-11-

Fixed versions

2014.1.3-11

Sources

published · modified · JSON