Red Hat Security AdvisoryRHSA-2014:0516
openstack-neutron security, bug fix, and enhancement update
Released 2014-05-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-neutron-2013.2.3-7.el6ost, openstack-neutron-bigswitch-2013.2.3-7.el6ost, openstack-neutron-brocade-2013.2.3-7.el6ost +15
Fixes 2 records
Priority LOW 39
The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration f…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.03324 · Published 2014-06-02 · Partial fix CWE-264
Priority LOW 14
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in…
CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.01445 · Published 2014-05-08 · Partial fix · 2013.2.3 CWE-287
