The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id…
Priority LOW 14CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- Partial Red Hat: 1 fixed, 1 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-287.
Summary
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.
Why it matters now
EPSS 0.01445 73rd percentileScored 2026-11-07
Fix Partial neutron (PyPI): 2013.2.3Red Hat: 1 advisoryRed Hat: 1 fixed, 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | neutron (PyPI) | 2012.2 to before 2013.2.3 | 2013.2.3 | Patch available | GHSA-72p9-6gc7-q93r |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- neutron (PyPI) Vendor— Affected 2012.2 to before 2013.2.3 Fixed in 2013.2.3 Patch available GHSA-72p9-6gc7-q93r
CPE configurations NVD · 15
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openstack:neutron:2012.2:*:*:*:*:*:*:* | 2012.2 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2012.2.1:*:*:*:*:*:*:* | 2012.2.1 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2012.2.2:*:*:*:*:*:*:* | 2012.2.2 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2012.2.3:*:*:*:*:*:*:* | 2012.2.3 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2012.2.4:*:*:*:*:*:*:* | 2012.2.4 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.1:*:*:*:*:*:*:* | 2013.1 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.1.1:*:*:*:*:*:*:* | 2013.1.1 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.1.2:*:*:*:*:*:*:* | 2013.1.2 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.1.3:*:*:*:*:*:*:* | 2013.1.3 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.1.4:*:*:*:*:*:*:* | 2013.1.4 | Vulnerable | OpenStack |
- cpe:2.3:a:openstack:neutron:2012.2:*:*:*:*:*:*:* Versions 2012.2 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2012.2.1:*:*:*:*:*:*:* Versions 2012.2.1 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2012.2.2:*:*:*:*:*:*:* Versions 2012.2.2 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2012.2.3:*:*:*:*:*:*:* Versions 2012.2.3 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2012.2.4:*:*:*:*:*:*:* Versions 2012.2.4 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.1:*:*:*:*:*:*:* Versions 2013.1 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.1.1:*:*:*:*:*:*:* Versions 2013.1.1 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.1.2:*:*:*:*:*:*:* Versions 2013.1.2 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.1.3:*:*:*:*:*:*:* Versions 2013.1.3 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.1.4:*:*:*:*:*:*:* Versions 2013.1.4 Vulnerable ·OpenStack
Show 5 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openstack:neutron:2013.1.5:*:*:*:*:*:*:* | 2013.1.5 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.2:*:*:*:*:*:*:* | 2013.2 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.2.1:*:*:*:*:*:*:* | 2013.2.1 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:neutron:2013.2.2:*:*:*:*:*:*:* | 2013.2.2 | Vulnerable | OpenStack |
| cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:* | 13.10 | Vulnerable | Canonical |
- cpe:2.3:a:openstack:neutron:2013.1.5:*:*:*:*:*:*:* Versions 2013.1.5 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.2:*:*:*:*:*:*:* Versions 2013.2 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.2.1:*:*:*:*:*:*:* Versions 2013.2.1 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:neutron:2013.2.2:*:*:*:*:*:*:* Versions 2013.2.2 Vulnerable ·OpenStack
- cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:* Versions 13.10 Vulnerable ·Canonical
Remediation
- Fix · GHSA-72p9-6gc7-q93r neutron (PyPI) Fixed in 2013.2.3 Advisory →
Red Hat 1 advisory
- RHSA-2014:0516 Released 2014-05-29 · Red Hat rating Moderateopenstack-neutron security, bug fix, and enhancement update
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-neutron-2013.2.3-7.el6ost, openstack-neutron-bigswitch-2013.2.3-7.el6ost, openstack-neutron-brocade-2013.2.3-7.el6ost +15
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenStack Platform 3 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux OpenStack Platform 4.0 | Fixed | RHSA-2014:0516 |
Not affected: 1 product
- Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)
Timeline
- 2026-10-02 Threatist record created from CVE-2014-0056
- 2026-10-03 Alias added: GHSA-72p9-6gc7-q93r
References
Other 6
- [oss-security] 20140328 [OSSA 2014-008] Routers can be cross plugged by other tenants (CVE-2014-0056)
- https://bugs.launchpad.net/neutron/+bug/1243327
- https://access.redhat.com/errata/RHSA-2014:0516
- https://access.redhat.com/security/cve/CVE-2014-0056
- https://bugzilla.redhat.com/show_bug.cgi?id=1063141
- https://opendev.org/openstack/neutron
Sources
- CVE-2014-0056 · CVE Program
- CVE-2014-0056 · NVD
- FIRST EPSS
- GHSA-72p9-6gc7-q93r · GitHub Advisory Database · CC BY 4.0
- CVE-2014-0056 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences