CVE-2013-6491: Openstack Oslo

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

• Openstack Oslo: up to and including 2013
• Red Hat Openstack: version 3.0 only

Published 2014-02-02. Last modified 2026-06-17.