python-django-horizon: denial of service
Package(s): | python-django-horizon | CVE #(s): | CVE-2014-8124 | ||||||||||||||||
Created: | January 5, 2015 | Updated: | January 7, 2015 | ||||||||||||||||
Description: | From the CVE entry:
OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page. | ||||||||||||||||||
Alerts: |
|