Red Hat Security Advisory

RHSA-2014:0091

openstack-neutron security, bug fix, and enhancement update

Released 2014-01-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-neutron-2013.2.1-4.el6ost, openstack-neutron-bigswitch-2013.2.1-4.el6ost, openstack-neutron-brocade-2013.2.1-4.el6ost +15

Fixes 1 record

TI-2013-05373 CVE-2013-6419 · GHSA-22w9-j288-8p9w

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1…

LOW 27

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01852 Published 2014-01-07 Fixed in 12.0.0a0 CWE-200