Red Hat Security Advisory

RHSA-2014:0233

openstack-packstack security and bug fix update

Released 2014-03-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-packstack-2013.2.1-0.25.dev987.el6ost, packstack-modules-puppet-2013.2.1-0.25.dev987.el6ost

Fixes 1 record

TI-2014-00066 CVE-2014-0071 · GHSA-c9wp-3wwr-qvrc

PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when…

LOW 32

PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01819 Published 2014-04-17 Partial fix CWE-264