CVE-2014-8124
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.9%
OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.
Produtos afetados
n/a · n/aReferências
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147520.htmlhttp://lists.openstack.org/pipermail/openstack-announce/2014-December/000308.htmlhttp://lists.opensuse.org/opensuse-updates/2015-01/msg00040.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0839.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0845.htmlhttps://bugs.launchpad.net/horizon/+bug/1394370http://secunia.com/advisories/61186http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html