Lucene search

K
nvd[email protected]NVD:CVE-2013-6433
HistoryJun 02, 2014 - 3:55 p.m.

CVE-2013-6433

2014-06-0215:55:10
CWE-264
web.nvd.nist.gov

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.2%

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

Affected configurations

NVD
Node
openstackneutronRange2013.12013.2.3
Node
canonicalubuntu_linuxMatch13.10
OR
canonicalubuntu_linuxMatch14.04lts

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.2%