CVE-2014-8124
Medium
Description
OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Openstack Horizon
PublishedDec 12, 2014
First seenDec 12, 2014
How to fix
Update
- openstack horizon2014.1.3, 2014.2.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack horizon | 2014.1 ≤ v < 2014.1.3, 2014.2.0 ≤ v < 2014.2.1 | 2014.1.3, 2014.2.1 |
| fedoraproject fedora | 21 | — |
| opensuse opensuse | 13.1 | — |
| oracle solaris | 11.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.