Lucene search

K
nvd[email protected]NVD:CVE-2014-0071
HistoryApr 17, 2014 - 2:55 p.m.

CVE-2014-0071

2014-04-1714:55:06
CWE-264
web.nvd.nist.gov
5

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

65.3%

PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections.

Affected configurations

Nvd
Node
redhatopenstackMatch4.0
VendorProductVersionCPE
redhatopenstack4.0cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

65.3%