Lucene search

K
githubGitHub Advisory DatabaseGHSA-HHPJ-6PJ7-WPX5
HistoryMay 17, 2022 - 3:52 a.m.

OpenStack Neutron Race condition vulnerability

2022-05-1703:52:44
CWE-362
GitHub Advisory Database
github.com
2

7 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.4%

Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group rules are applied.

Affected configurations

Vulners
Node
github_advisory_databaseneutronRange<7.0.0
CPENameOperatorVersion
neutronlt7.0.0

7 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.4%