CVE-2014-0040

CVE-2014-0040 describes a man-in-the-middle vulnerability in OpenStack Heat Templates, specifically affecting Red Hat Enterprise Linux OpenStack Platform 4.0. The vulnerability arises because Heat Templates use unencrypted HTTP connections to download packages and signing keys from Yum repositories, allowing attackers to prevent updates. This medium-severity vulnerability has a CVSS score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N), indicating it can be exploited remotely with moderate complexity to impact integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.