Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-1p1c-fevy-bydg
Aliases:
CVE-2015-0259
GHSA-x8xr-rm9r-7mvf
|
Insufficient Verification of Data Authenticity
It was discovered that the OpenStack Compute (nova) console websocket does not correctly verify the origin header. An attacker could use this flaw to conduct a cross-site websocket hijack attack. Note that only Compute setups with VNC or SPICE enabled were affected by this flaw.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|