Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Oslo 加密问题漏洞
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。Oslo是其中的一个提供了一系列OpenStack Projects共享基础库的项目。 OpenStack Oslo 2013及之前的版本中的python-qpid客户端(common/rpc/impl_qpid.py)中存在加密问题漏洞，该漏洞源于当‘qpid_protocol’设置为ssl时，程序没有正确执行SSL
CVSS Information
N/A
Vulnerability Type
N/A