CVE-2014-3703

2014-12-0201:00:00

redhat

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

JSON

OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.

References

rhn.redhat.com/errata/RHSA-2014-1691.html