View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-8124 medium priority: Ubuntu including 2 source packages (horizon, python-django-openstack-auth), 12 status rows across 6 suites (lucid, precise, trusty, upstream, utopic, vivid): not-affected 5, DNE 4, released 3.
OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.