neutron is vulnerable to information disclosure. The Agent OVS interface adds ports without a VLAN tag. This allows a port to become a trunk port and receive traffic from external networks or any other ports sending traffic on br-int
, if the neutron-openvswitch-agent
fails to set the VLAN tag.
CPE | Name | Operator | Version |
---|---|---|---|
neutron | le | 13.0.0.0b1 |