CVE-2013-4471: Medium severity Openstack Horizon vulnerability
The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4471?
CVE-2013-4471 is classified as a high severity vulnerability due to the potential for unauthorized password changes.
How do I fix CVE-2013-4471?
To fix CVE-2013-4471, upgrade to OpenStack Dashboard (Horizon) version 2013.2 or later.
What systems are affected by CVE-2013-4471?
CVE-2013-4471 affects OpenStack Dashboard (Horizon) versions prior to 2013.2.
What type of vulnerability is CVE-2013-4471?
CVE-2013-4471 is a security vulnerability that allows attackers to change user passwords without authentication.
What can attackers do with CVE-2013-4471?
Attackers can exploit CVE-2013-4471 to change a user's password using their authentication token, compromising their account.