Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2014-0071
HistoryApr 17, 2014 - 2:55 p.m.

CVE-2014-0071

2014-04-1714:55:06
Debian Security Bug Tracker
security-tracker.debian.org
10

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.003

Percentile

65.3%

PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

0.003

Percentile

65.3%

Related for DEBIANCVE:CVE-2014-0071