Total vulnerabilities in the database
OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.
| Software | From | Fixed in |
|---|---|---|
| openstack / horizon | 2014.1 | 2014.1.3 |
| openstack / horizon | 2014.2.0 | 2014.2.1 |
| fedoraproject / fedora | 21 | 21.x |
| opensuse / opensuse | 13.1 | 13.1.x |
| oracle / solaris | 11.2 | 11.2.x |