CVE-2014-4615

Published: Aug 19, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).

Affected (26)

Products: Canonical: Ubuntu Linux · Redhat: Openstack · Openstack: Neutron, Oslo, Pycadf, Telemetry (ceilometer)

1 product

1 product

4 products

Telemetry (ceilometer)

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Redhat Openstack	Version 4.0

Configuration B

24 vulnerable

Vulnerable Software	Affected Versions
Openstack Neutron	Version 2014.1.1
Openstack Neutron	Version 2014.1
Openstack Neutron	Version juno1
Openstack Oslo	All versions
Openstack Pycadf	Up to 0.5.0
Openstack Pycadf	Version 0.1.1
Openstack Pycadf	Version 0.1.2
Openstack Pycadf	Version 0.1.3
Openstack Pycadf	Version 0.1.4
Openstack Pycadf	Version 0.1.5
Openstack Pycadf	Version 0.1.6
Openstack Pycadf	Version 0.1.7
Openstack Pycadf	Version 0.1.8
Openstack Pycadf	Version 0.1.9
Openstack Pycadf	Version 0.1
Openstack Pycadf	Version 0.2.1
Openstack Pycadf	Version 0.2.2
Openstack Pycadf	Version 0.2
Openstack Pycadf	Version 0.3.1
Openstack Pycadf	Version 0.3
Openstack Pycadf	Version 0.4.1
Openstack Pycadf	Version 0.4
Openstack Telemetry (ceilometer)	Version 2013.2
Openstack Telemetry (ceilometer)	Version 2014.1