Oval Definition:oval:org.opensuse.security:def:20150259
Revision Date:2021-07-10Version:1
Title:CVE-2015-0259
Description:

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-0259
Mitre CVE-2015-0259
SUSE CVE-2015-0259
Platform(s):SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE OpenStack Cloud 6
Product(s):
Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND Package Information
  • openstack-nova-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-api-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-cells-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-cert-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-compute-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-conductor-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-console-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-consoleauth-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-novncproxy-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-objectstore-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-scheduler-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-serialproxy-12.0.2~a0~dev18-1 is installed
  • OR openstack-nova-vncproxy-12.0.2~a0~dev18-1 is installed
  • OR python-nova-12.0.2~a0~dev18-1 is installed
  • Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND Package Information
  • openstack-ceilometer-2014.2.4.dev18-3.2 is installed
  • OR openstack-ceilometer-agent-compute-2014.2.4.dev18-3.2 is installed
  • OR openstack-neutron-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-dhcp-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-ha-tool-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-l3-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-lbaas-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-linuxbridge-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-metadata-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-metering-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-openvswitch-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-neutron-vpn-agent-2014.2.4~a0~dev78-7.2 is installed
  • OR openstack-nova-2014.2.4~a0~dev61-6.2 is installed
  • OR openstack-nova-compute-2014.2.4~a0~dev61-6.2 is installed
  • OR openstack-suse-sudo-2014.2-5.1 is installed
  • OR python-ceilometer-2014.2.4.dev18-3.2 is installed
  • OR python-neutron-2014.2.4~a0~dev78-7.2 is installed
  • OR python-nova-2014.2.4~a0~dev61-6.2 is installed
  • BACK