NetSight
IP …
medium5.0

CVE-2014-8124

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine…

Impact

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Affected products

VendorProductAffected versions
OpenstackHorizon
from 2014.1 before 2014.1.3
from 2014.2.0 before 2014.2.1
FedoraprojectFedora
Version 21
OpensuseOpensuse
Version 13.1
OracleSolaris
Version 11.2

Weakness classification

CWE-400

References