https://bugzilla.redhat.com/show_bug.cgi?id=1702439
--- Doc Text *updated* by Summer Long <slong(a)redhat.com> ---
A man-in-the-middle flaw was discovered in Apache's qpid-proton functionality. If an
attacker were able to intercept TLS traffic from a server offering anonymous ciphers, they
could connect as a client to the server irrespective of whether the client was configured
to verify the server's certificate or certificate against the hostname used to
connect.
--- Comment #6 from Summer Long <slong(a)redhat.com> ---
Statement:
Red Hat OpenStack Platform 14 (and its Operational Tools) is impacted by this
flaw; other versions are not vulnerable.
--
You are receiving this mail because:
You are on the CC list for the bug.