yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1319319] Re: The web server allows the HTTP TRACE or TRACK methods.

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Zhang Yun <zhangyun@xxxxxxxxxx>
Date: Tue, 16 Sep 2014 06:14:54 -0000
Reply-to: Bug 1319319 <1319319@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Hi Mark, could we disable HTTP TRACE support in our web server to avoid
this security issue?

** Changed in: openstack-chef
       Status: Expired => New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1319319

Title:
  The web server allows the HTTP TRACE or TRACK methods.

Status in OpenStack Dashboard (Horizon):
  Invalid
Status in OpenStack + Chef:
  New
Status in OpenStack Security Advisories:
  Invalid

Bug description:
  
  The Horizon affected by it. This is related to configuration of  "RewriteCond" in sites-enabled/openstack-dashboard, covered by stackforge/cookbook-openstack-dashboard project.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1319319/+subscriptions