Skip to content
OpenAdvisories

Package · Ubuntu

python-oslo.messaging

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.4

    OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

    An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When ssl_ca_file is configured, the driver enables certificate chain…