The web server allows the HTTP TRACE or TRACK methods.
Bug #1319319 reported by
Zhang Yun
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack + Chef |
Fix Released
|
Low
|
Mark Vanderwiel | ||
OpenStack Dashboard (Horizon) |
Invalid
|
Undecided
|
Unassigned | ||
OpenStack Security Advisory |
Invalid
|
Undecided
|
Unassigned |
Bug Description
The Horizon affected by it. This is related to configuration of "RewriteCond" in sites-enabled/
information type: | Private Security → Public Security |
Changed in ossa: | |
status: | New → Incomplete |
Changed in openstack-chef: | |
assignee: | nobody → Mark Vanderwiel (vanderwl) |
tags: | added: dashboard |
Changed in openstack-chef: | |
importance: | Undecided → Low |
To post a comment you must log in.
The advisory task is incomplete pending additional details from security reviewers (horizon-coresec).