Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ndt5-7wt1-dfbh
SummaryThe notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUTH_TOKEN values by reading the message queue (v2/meters/http.request).
Aliases
0
alias CVE-2014-4615
Fixed_packages
0
url pkg:deb/debian/ceilometer@2014.1.2-1?distro=trixie
purl pkg:deb/debian/ceilometer@2014.1.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceilometer@2014.1.2-1%3Fdistro=trixie
1
url pkg:deb/debian/ceilometer@1:15.0.0-3?distro=trixie
purl pkg:deb/debian/ceilometer@1:15.0.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceilometer@1:15.0.0-3%3Fdistro=trixie
2
url pkg:deb/debian/ceilometer@1:19.0.0-3?distro=trixie
purl pkg:deb/debian/ceilometer@1:19.0.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceilometer@1:19.0.0-3%3Fdistro=trixie
3
url pkg:deb/debian/ceilometer@1:24.0.0-2?distro=trixie
purl pkg:deb/debian/ceilometer@1:24.0.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceilometer@1:24.0.0-2%3Fdistro=trixie
4
url pkg:deb/debian/ceilometer@1:26.0.0-1?distro=trixie
purl pkg:deb/debian/ceilometer@1:26.0.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceilometer@1:26.0.0-1%3Fdistro=trixie
5
url pkg:deb/debian/ceilometer@1:26.0.0-3?distro=trixie
purl pkg:deb/debian/ceilometer@1:26.0.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceilometer@1:26.0.0-3%3Fdistro=trixie
6
url pkg:deb/debian/neutron@2014.1.2-1?distro=trixie
purl pkg:deb/debian/neutron@2014.1.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2014.1.2-1%3Fdistro=trixie
7
url pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/neutron@2:17.2.1-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ecp9-x6p6-7fa2
1
vulnerability VCID-hzer-w69h-uyah
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:17.2.1-0%252Bdeb11u1%3Fdistro=trixie
8
url pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie
purl pkg:deb/debian/neutron@2:21.0.0-7?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hzer-w69h-uyah
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:21.0.0-7%3Fdistro=trixie
9
url pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie
purl pkg:deb/debian/neutron@2:26.0.0-9?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hzer-w69h-uyah
1
vulnerability VCID-vgam-kptj-nuhn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:26.0.0-9%3Fdistro=trixie
10
url pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie
purl pkg:deb/debian/neutron@2:27.0.1-6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hzer-w69h-uyah
1
vulnerability VCID-vgam-kptj-nuhn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:27.0.1-6%3Fdistro=trixie
11
url pkg:deb/debian/neutron@2:28.0.0-6?distro=trixie
purl pkg:deb/debian/neutron@2:28.0.0-6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-6%3Fdistro=trixie
12
url pkg:deb/debian/neutron@2:28.0.0-7?distro=trixie
purl pkg:deb/debian/neutron@2:28.0.0-7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/neutron@2:28.0.0-7%3Fdistro=trixie
13
url pkg:deb/debian/python-pycadf@0.5.1-1?distro=trixie
purl pkg:deb/debian/python-pycadf@0.5.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-pycadf@0.5.1-1%3Fdistro=trixie
14
url pkg:deb/debian/python-pycadf@3.1.1-2?distro=trixie
purl pkg:deb/debian/python-pycadf@3.1.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-pycadf@3.1.1-2%3Fdistro=trixie
15
url pkg:deb/debian/python-pycadf@4.0.1-1?distro=trixie
purl pkg:deb/debian/python-pycadf@4.0.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-pycadf@4.0.1-1%3Fdistro=trixie
16
url pkg:deb/debian/python-pycadf@4.0.1-2?distro=trixie
purl pkg:deb/debian/python-pycadf@4.0.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-pycadf@4.0.1-2%3Fdistro=trixie
Affected_packages
0
url pkg:rpm/redhat/openstack-ceilometer@2013.2.3-2?arch=el6ost
purl pkg:rpm/redhat/openstack-ceilometer@2013.2.3-2?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ndt5-7wt1-dfbh
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-ceilometer@2013.2.3-2%3Farch=el6ost
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4615.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4615.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-4615
reference_id
reference_type
scores
0
value 0.0075
scoring_system epss
scoring_elements 0.73494
published_at 2026-06-04T12:55:00Z
1
value 0.0075
scoring_system epss
scoring_elements 0.73531
published_at 2026-06-05T12:55:00Z
2
value 0.0075
scoring_system epss
scoring_elements 0.73536
published_at 2026-06-06T12:55:00Z
3
value 0.0075
scoring_system epss
scoring_elements 0.73523
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-4615
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4615
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1112945
reference_id 1112945
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1112945
4
reference_url https://access.redhat.com/errata/RHSA-2014:1050
reference_id RHSA-2014:1050
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1050
5
reference_url https://usn.ubuntu.com/2311-1/
reference_id USN-2311-1
reference_type
scores
url https://usn.ubuntu.com/2311-1/
6
reference_url https://usn.ubuntu.com/2311-2/
reference_id USN-2311-2
reference_type
scores
url https://usn.ubuntu.com/2311-2/
7
reference_url https://usn.ubuntu.com/2321-1/
reference_id USN-2321-1
reference_type
scores
url https://usn.ubuntu.com/2321-1/
Weaknesses
0
cwe_id 201
name Insertion of Sensitive Information Into Sent Data
description The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ndt5-7wt1-dfbh