Unrated severityNVD Advisory· Published Jun 2, 2014· Updated Jun 17, 2026

CVE-2014-0040

Description

OpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 4.0, uses an HTTP connection to download (1) packages and (2) signing keys from Yum repositories, which allows man-in-the-middle attackers to prevent updates via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Openstack
cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:*
OpenStack/Tripleo Heat Templatesllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/openstack/heat-templates/commit/65a4f8bebc72da71c616e2e378b7b1ac354db1a3nvdExploitPatch
rhn.redhat.com/errata/RHSA-2014-0579.htmlnvdVendor Advisory
bugs.launchpad.net/heat-templates/+bug/1267635nvd
bugzilla.redhat.com/show_bug.cginvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000