CVE-2015-0259: Medium severity openstack compute (nova) vulnerability
OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0259?
CVE-2015-0259 is classified as a high severity vulnerability due to the potential for authentication hijacking.
How do I fix CVE-2015-0259?
To fix CVE-2015-0259, you should upgrade OpenStack Compute (Nova) to version 2014.1.4 or later, or 2014.2.3 or later.
What systems are affected by CVE-2015-0259?
CVE-2015-0259 affects OpenStack Compute (Nova) before version 2014.1.4, 2014.2.x before 2014.2.3, and certain milestones of 2015.1.0.
What types of attacks can occur due to CVE-2015-0259?
CVE-2015-0259 allows remote attackers to hijack user authentication, potentially gaining unauthorized access to console sessions.
Is CVE-2015-0259 still relevant today?
While CVE-2015-0259 is from 2015, it remains relevant for users of outdated OpenStack versions that have not been patched.