Lucene search
UbuntuUSN-2194-1HistoryMay 05, 2014 - 12:00 a.m.
OpenStack Neutron vulnerability
2014-05-0500:00:00
ubuntu.com
29
6.1 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.3%
Releases
- Ubuntu 13.10
Packages
- neutron - Openstack Virtual Network Service
Details
Aaron Rosen discovered that OpenStack Neutron did not properly perform
authorization checks when creating ports when using plugins relying on the
l3-agent. A remote authenticated attacker could exploit this to access the
network of other tenants.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.10 | noarch | python-neutron | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-common | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-dhcp-agent | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-l3-agent | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-lbaas-agent | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-metadata-agent | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-plugin-bigswitch | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-plugin-brocade | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-plugin-cisco | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | neutron-plugin-hyperv | < 1:2013.2.3-0ubuntu1.1 | UNKNOWN |
References
Related
debiancve
debiancve
CVE-2014-0056
2014-05-08 14:29:00
github
github
OpenStack Neutron Improper Authentication vulnerability
2022-05-17 04:42:41
nessus
nessus
Ubuntu 13.10 : neutron vulnerability (USN-2194-1)
2014-05-06 00:00:00
openvas
openvas
Ubuntu Update for neutron USN-2194-1
2014-05-12 00:00:00
Ubuntu: Security Advisory (USN-2194-1)
2014-05-12 00:00:00
prion
prion
Command injection
2014-05-08 14:29:00
securityvulns
securityvulns
[USN-2194-1] OpenStack Neutron vulnerability
2014-05-07 00:00:00
OpenStack multiple security vulnerabilities
2014-05-07 00:00:00
osv
osv
OpenStack Neutron Improper Authentication vulnerability
2022-05-17 04:42:41
cve
cve
CVE-2014-0056
2014-05-08 14:29:00
ubuntucve
ubuntucve
CVE-2014-0056
2014-04-01 00:00:00
redhat
redhat
veracode
veracode
Information Disclosure
2019-05-02 04:58:09
6.1 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.3%
Related for USN-2194-1