Default Configuration Disables Authentication for Qpid in OpenStack-Foreman-Installer

CVE-2013-6470 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.