Summary
Elena Ezhova discovered that OpenStack Neutron did not properly perform
access control checks for attributes. A remote authenticated attacker could
exploit this to bypass intended access controls and reset admin-only
attributes to default values.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | neutron | 1:2014.1.3-0ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network att…
References
-
report
https://ubuntu.com/security/CVE-2014-6414