CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17134

Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 76.8%

CVSS Severity

CVSS v3 Score 9.1

CVSS v2 Score 6.4

References

Products affected by CVE-2019-17134

Opendev » Octavia » Version: 0.10.0

cpe:2.3:a:opendev:octavia:0.10.0
Opendev » Octavia » Version: 1.0.0

cpe:2.3:a:opendev:octavia:1.0.0
Opendev » Octavia » Version: 1.0.1

cpe:2.3:a:opendev:octavia:1.0.1
Opendev » Octavia » Version: 1.0.2

cpe:2.3:a:opendev:octavia:1.0.2
Opendev » Octavia » Version: 1.0.3

cpe:2.3:a:opendev:octavia:1.0.3
Opendev » Octavia » Version: 1.0.4

cpe:2.3:a:opendev:octavia:1.0.4
Opendev » Octavia » Version: 1.0.5

cpe:2.3:a:opendev:octavia:1.0.5
Opendev » Octavia » Version: 2.0.0

cpe:2.3:a:opendev:octavia:2.0.0
Opendev » Octavia » Version: 2.0.1

cpe:2.3:a:opendev:octavia:2.0.1
Opendev » Octavia » Version: 2.0.2

cpe:2.3:a:opendev:octavia:2.0.2
Opendev » Octavia » Version: 2.0.3

cpe:2.3:a:opendev:octavia:2.0.3
Opendev » Octavia » Version: 2.0.4

cpe:2.3:a:opendev:octavia:2.0.4
Opendev » Octavia » Version: 2.1.0

cpe:2.3:a:opendev:octavia:2.1.0
Opendev » Octavia » Version: 2.1.1

cpe:2.3:a:opendev:octavia:2.1.1
Opendev » Octavia » Version: 3.0.0

cpe:2.3:a:opendev:octavia:3.0.0
Opendev » Octavia » Version: 3.0.1

cpe:2.3:a:opendev:octavia:3.0.1
Opendev » Octavia » Version: 3.0.2

cpe:2.3:a:opendev:octavia:3.0.2
Opendev » Octavia » Version: 3.1.0

cpe:2.3:a:opendev:octavia:3.1.0
Opendev » Octavia » Version: 3.1.1

cpe:2.3:a:opendev:octavia:3.1.1
Opendev » Octavia » Version: 4.0.0

cpe:2.3:a:opendev:octavia:4.0.0
Opendev » Octavia » Version: 4.0.1

cpe:2.3:a:opendev:octavia:4.0.1
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17134

Products

Pricing

Contact Us