PT-2014-3464 · Red Hat+1 · Packstack+2

Publicado 2014-04-17 · Atualizado 2014-04-17 · CVE-2014-0071

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat OpenStack version 4.0

Description The issue allows remote attackers to bypass intended access restrictions and make unauthorized connections due to the lack of enforcement of default security groups when PackStack is deployed to Neutron.

Recommendations For Red Hat OpenStack version 4.0, ensure that default security groups are manually enforced when deploying PackStack to Neutron to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-0071

RHSA-2014:0233

Produtos afetados

Neutron

Packstack

Red Hat Openstack

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2014-0071 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2014-0071 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2014-0071 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1064163 · Nota
• https://cve.org/CVERecord?id=CVE-2014-0071 · Nota de Segurança
• http://securityfocus.com/bid/66001 · Nota
• http://rhn.redhat.com/errata/RHSA-2014-0233.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0071 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0071 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-0071 · Aviso do Fabricante